Skip to content

Commit f65a6e4

Browse files
Pin dependencies
1 parent c73be13 commit f65a6e4

16 files changed

Lines changed: 648 additions & 563 deletions

File tree

.github/workflows/ci.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ jobs:
88
# Label used to access the service container
99
db:
1010
# Docker Hub image
11-
image: postgres:12.22
11+
image: postgres:12.22@sha256:2f2a8c2a7d10862e7fba2602e304523554f9df8244c632dafe2628ccb398fb5c
1212
# Set health checks to wait until postgres has started
1313
options: >-
1414
--health-cmd pg_isready
@@ -23,7 +23,7 @@ jobs:
2323
- 5432:5432
2424

2525
redis:
26-
image: redis:8.2.2
26+
image: redis:8.2.2@sha256:4521b581dbddea6e7d81f8fe95ede93f5648aaa66a9dacd581611bf6fe7527bd
2727
ports:
2828
- 6379:6379
2929

@@ -37,7 +37,7 @@ jobs:
3737
run: cat Aptfile | sudo xargs apt-get install
3838

3939
- name: Install uv
40-
uses: astral-sh/setup-uv@v7
40+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
4141
with:
4242
enable-cache: true
4343

Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# hadolint global ignore=SC2046,DL3002,DL3008,DL3025,DL3042,DL4006
22

3-
FROM python:3.12-slim AS base
3+
FROM python:3.12-slim@sha256:520153e2deb359602c9cffd84e491e3431d76e7bf95a3255c9ce9433b76ab99a AS base
44
LABEL maintainer "ODL DevOps <mitx-devops@mit.edu>"
55

66
# Add package files, install updated node and pip
@@ -35,7 +35,7 @@ ENV \
3535
ENV PATH="/opt/venv/bin:$PATH"
3636

3737
# Install uv
38-
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin/
38+
COPY --from=ghcr.io/astral-sh/uv:latest@sha256:240fb85ab0f263ef12f492d8476aa3a2e4e1e333f7d67fbdd923d00a506a516a /uv /uvx /usr/local/bin/
3939

4040
# Install Chromium (commented out lines illustrate the syntax for getting specific chromium versions)
4141
RUN echo "deb http://deb.debian.org/debian/ sid main" >> /etc/apt/sources.list \

Dockerfile.watch

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
FROM node:24.13
1+
FROM node:24.13@sha256:00e9195ebd49985a6da8921f419978d85dfe354589755192dc090425ce4da2f7
22

33
# Install Playwright system dependencies
44
RUN apt-get update && apt-get install -y \

docker-compose.opensearch.base.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
services:
22
opensearch:
3-
image: opensearchproject/opensearch:3.3.0
3+
image: opensearchproject/opensearch:3.3.0@sha256:d96afaf6cbd2a6a3695aeb2f1d48c9a16ad5c8918eb849e5cbf43475f0f8e146
44
environment:
55
- "cluster.name=opensearch-cluster"
66
- "bootstrap.memory_lock=true" # along with the memlock settings below, disables swapping

docker-compose.services.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ services:
1010
db:
1111
profiles:
1212
- backend
13-
image: postgres:16
13+
image: postgres:16@sha256:760ea41aae126965bedd587d35a23de37447bb13a6ac4444bef6ff73b8b72234
1414
healthcheck:
1515
test: ["CMD", "pg_isready"]
1616
interval: 3s
@@ -30,7 +30,7 @@ services:
3030
redis:
3131
profiles:
3232
- backend
33-
image: redis:8.2.2
33+
image: redis:8.2.2@sha256:4521b581dbddea6e7d81f8fe95ede93f5648aaa66a9dacd581611bf6fe7527bd
3434
healthcheck:
3535
test: ["CMD", "redis-cli", "ping", "|", "grep", "PONG"]
3636
interval: 3s
@@ -39,7 +39,7 @@ services:
3939
ports:
4040
- "6379"
4141
qdrant:
42-
image: qdrant/qdrant:latest
42+
image: qdrant/qdrant:latest@sha256:94728574965d17c6485dd361aa3c0818b325b9016dac5ea6afec7b4b2700865f
4343
ports:
4444
- "6333:6333"
4545
volumes:
@@ -67,12 +67,12 @@ services:
6767
tika:
6868
profiles:
6969
- backend
70-
image: apache/tika:2.5.0
70+
image: apache/tika:2.5.0@sha256:d680d1d7136f35de43294e7b80ac495da463f069b0f1d59be1ebac5f0543f075
7171
ports:
7272
- "9998:9998"
7373

7474
locust:
75-
image: locustio/locust
75+
image: locustio/locust@sha256:ea785ebc49c887007e0e6809cc9a839edc0d2199a4ddf1d249f23f11fda52787
7676
ports:
7777
- "8089:8089"
7878
volumes:
@@ -84,7 +84,7 @@ services:
8484
- load-testing
8585

8686
locust-worker:
87-
image: locustio/locust
87+
image: locustio/locust@sha256:ea785ebc49c887007e0e6809cc9a839edc0d2199a4ddf1d249f23f11fda52787
8888
volumes:
8989
- ./load_testing_locust:/mnt/locust
9090
command: -f /mnt/locust/locustfile.py --worker --master-host locust
@@ -96,7 +96,7 @@ services:
9696
keycloak:
9797
profiles:
9898
- keycloak
99-
image: quay.io/keycloak/keycloak:26.4
99+
image: quay.io/keycloak/keycloak:26.4@sha256:9409c59bdfb65dbffa20b11e6f18b8abb9281d480c7ca402f51ed3d5977e6007
100100
depends_on:
101101
db:
102102
condition: service_healthy
@@ -122,7 +122,7 @@ services:
122122
apigateway:
123123
profiles:
124124
- apisix
125-
image: apache/apisix:3.13.0-debian # versions above this drop the local port on redirects
125+
image: apache/apisix:3.13.0-debian@sha256:c5c7a55ebb5c07abc210dbb963a37f41030e12c91d23bacedbaa168fec633bd7 # versions above this drop the local port on redirects
126126
<<: *default-extra-hosts
127127
environment:
128128
- CSRF_COOKIE_DOMAIN=${CSRF_COOKIE_DOMAIN:-.odl.local}

frontends/api/package.json

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@
2020
"react": "^19.2.1"
2121
},
2222
"devDependencies": {
23-
"@faker-js/faker": "^10.0.0",
24-
"@testing-library/react": "^16.3.0",
25-
"enforce-unique": "^1.3.0",
26-
"jest": "^29.7.0",
27-
"jest-when": "^3.7.0",
28-
"lodash": "^4.17.21",
23+
"@faker-js/faker": "10.4.0",
24+
"@testing-library/react": "16.3.2",
25+
"enforce-unique": "1.3.0",
26+
"jest": "29.7.0",
27+
"jest-when": "3.7.0",
28+
"lodash": "4.18.1",
2929
"ol-test-utilities": "0.0.0"
3030
},
3131
"dependencies": {

frontends/main/Dockerfile.web

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@
5757
# heroku container:release --app mitopen-rc-nextjs frontend
5858

5959

60-
FROM node:24-alpine AS base
60+
FROM node:24-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f AS base
6161

6262
RUN apk update
6363
RUN apk add --no-cache libc6-compat && \

frontends/main/package.json

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -70,27 +70,27 @@
7070
"yup": "^1.4.0"
7171
},
7272
"devDependencies": {
73-
"@faker-js/faker": "^10.0.0",
74-
"@happy-dom/jest-environment": "^20.1.0",
75-
"@testing-library/jest-dom": "^6.4.8",
76-
"@testing-library/react": "^16.3.0",
77-
"@testing-library/user-event": "^14.5.2",
78-
"@types/jest": "^29.5.12",
79-
"@types/lodash": "^4.17.7",
80-
"@types/node": "^24.0.0",
73+
"@faker-js/faker": "10.4.0",
74+
"@happy-dom/jest-environment": "20.9.0",
75+
"@testing-library/jest-dom": "6.9.1",
76+
"@testing-library/react": "16.3.2",
77+
"@testing-library/user-event": "14.6.1",
78+
"@types/jest": "29.5.14",
79+
"@types/lodash": "4.17.24",
80+
"@types/node": "24.12.2",
8181
"@types/react": "^19.2.7",
8282
"@types/react-dom": "^19.2.3",
83-
"@types/react-slick": "^0.23.13",
84-
"@types/slick-carousel": "^1",
83+
"@types/react-slick": "0.23.13",
84+
"@types/slick-carousel": "1.6.40",
8585
"eslint": "8.57.1",
86-
"eslint-config-next": "^16.1.6",
87-
"http-proxy-middleware": "^3.0.0",
88-
"jest": "^29.7.0",
89-
"jest-extended": "^7.0.0",
90-
"jest-next-dynamic-ts": "^0.1.1",
91-
"next-router-mock": "^1.0.2",
86+
"eslint-config-next": "16.2.4",
87+
"http-proxy-middleware": "3.0.5",
88+
"jest": "29.7.0",
89+
"jest-extended": "7.0.0",
90+
"jest-next-dynamic-ts": "0.1.1",
91+
"next-router-mock": "1.0.5",
9292
"ol-test-utilities": "0.0.0",
93-
"ts-jest": "^29.2.4",
94-
"typescript": "^5.5.4"
93+
"ts-jest": "29.4.9",
94+
"typescript": "5.9.3"
9595
}
9696
}

frontends/ol-components/package.json

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -46,27 +46,27 @@
4646
"wheel-indicator": "^1.3.0"
4747
},
4848
"devDependencies": {
49-
"@chromatic-com/storybook": "^5.0.0",
50-
"@faker-js/faker": "^10.0.0",
51-
"@storybook/addon-docs": "^10.0.0",
52-
"@storybook/addon-links": "^10.0.0",
53-
"@storybook/addon-onboarding": "^10.0.0",
54-
"@storybook/addon-webpack5-compiler-swc": "^4.0.0",
55-
"@storybook/nextjs": "^10.2.4",
49+
"@chromatic-com/storybook": "5.1.2",
50+
"@faker-js/faker": "10.4.0",
51+
"@storybook/addon-docs": "10.3.5",
52+
"@storybook/addon-links": "10.3.5",
53+
"@storybook/addon-onboarding": "10.3.5",
54+
"@storybook/addon-webpack5-compiler-swc": "4.0.3",
55+
"@storybook/nextjs": "10.3.5",
5656
"@storybook/test": "8.6.15",
57-
"@testing-library/react": "^16.3.0",
58-
"@testing-library/user-event": "^14.5.2",
59-
"@types/lodash.throttle": "^4.1.9",
60-
"@types/react-google-recaptcha": "^2.1.9",
61-
"@types/react-slick": "^0.23.13",
62-
"@types/validator": "^13.7.6",
63-
"dotenv": "^17.0.0",
64-
"lodash": "^4.17.21",
65-
"prop-types": "^15.8.1",
66-
"sass": "^1.93.3",
67-
"sass-embedded": "^1.93.3",
68-
"storybook": "^10.2.4",
69-
"typescript": "^5.5.4"
57+
"@testing-library/react": "16.3.2",
58+
"@testing-library/user-event": "14.6.1",
59+
"@types/lodash.throttle": "4.1.9",
60+
"@types/react-google-recaptcha": "2.1.9",
61+
"@types/react-slick": "0.23.13",
62+
"@types/validator": "13.15.10",
63+
"dotenv": "17.4.2",
64+
"lodash": "4.18.1",
65+
"prop-types": "15.8.1",
66+
"sass": "1.99.0",
67+
"sass-embedded": "1.99.0",
68+
"storybook": "10.3.5",
69+
"typescript": "5.9.3"
7070
},
7171
"peerDependencies": {
7272
"@mitodl/smoot-design": "^6.24.0",

frontends/ol-test-utilities/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"react": "^19.2.1"
2121
},
2222
"devDependencies": {
23-
"@types/lodash": "^4.17.7",
23+
"@types/lodash": "4.17.24",
2424
"@types/react": "^19.2.7"
2525
}
2626
}

0 commit comments

Comments
 (0)