Bumps node modules

Author: poad

.github/workflows/build.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       - name: Pull request auto merge enabler
         if: github.event_name == 'pull_request' && github.actor != 'dependabot[bot]'
-        uses: poad/github-pull-request-auto-merge-enable-action@v3.0.2
+        uses: poad/github-pull-request-auto-merge-enable-action@3a9b27f412592f0eb2cd6649509178e1fcaf3ccf # v3.0.2
         with:
           pull_request_number: ${{ github.event.pull_request.number }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
@@ -51,7 +51,9 @@ jobs:
       run: rustup update
     - name: Install cross
       run: cargo install cross
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
     - name: Build
       run: cargo build --verbose
     - name: Run tests

.github/workflows/dependabot-auto-merge.yml

@@ -13,13 +13,6 @@ jobs:
     if: github.actor == 'dependabot[bot]'
 
     steps:
-      - uses: actions/checkout@v6
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v3
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Enable auto-merge for Dependabot Dependabot Pull Request
         run: |
           gh pr review --approve "$PR_URL"

.github/workflows/deploy.yml

@@ -32,7 +32,9 @@ jobs:
       run: rustup update
     - name: Install cross
       run: cargo install cross 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
     - name: Build
       run: cargo build --verbose --release
 
@@ -49,7 +51,7 @@ jobs:
         zip csv2dynamodb${{ matrix.config.suffix }}.zip csv2dynamodb${{ matrix.config.extention }}
 
     - name: Release
-      uses: softprops/action-gh-release@v3
+      uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
       if: startsWith(github.ref, 'refs/tags/')
       with:
         files: |

.github/workflows/e2e.yml

@@ -23,16 +23,18 @@ jobs:
       table: ${{ steps.gen-table-name.outputs.table }}
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
 
-    - name: Use Node.js 22.x
-      uses: actions/setup-node@v6
+    - name: Use Node.js
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
-        node-version: 22.x
+        node-version: 'lts/*'
         check-latest: true
         package-manager-cache: false
 
-    - uses: pnpm/action-setup@v6
+    - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
       name: Install pnpm
       with:
         package_json_file: tests/infra/package.json
@@ -47,7 +49,7 @@ jobs:
       run: echo "table=csv2dynamodb-test-$(date +%Y%m%d-%H%M%S)" >> $GITHUB_OUTPUT
 
     - name: configure aws credentials
-      uses: aws-actions/configure-aws-credentials@v6
+      uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
       with:
         role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
         role-session-name: GitHubActions
@@ -65,15 +67,15 @@ jobs:
 
     steps:
     - name: Configure AWS Credentials
-      uses: aws-actions/configure-aws-credentials@v6
+      uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
       with:
         aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }}
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: us-west-2
 
     - name: Update Rust toolchain
       run: rustup update
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Run E2E test
       run: cargo run --verbose -- --file-path ./tests/test_data2.csv --table ${{ needs.setup.outputs.table }}
 
@@ -82,16 +84,16 @@ jobs:
     needs: [setup, test]
     if: ${{ always() }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Use Node.js 22.x
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version: 22.x
         check-latest: true
         package-manager-cache: false
 
-    - uses: pnpm/action-setup@v6
+    - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
       name: Install pnpm
       with:
         package_json_file: tests/infra/package.json
@@ -104,7 +106,7 @@ jobs:
       run: |
         npm -g i npm aws-cdk
     - name: configure aws credentials
-      uses: aws-actions/configure-aws-credentials@v6
+      uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
       with:
         role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
         role-session-name: GitHubActions

tests/infra/package.json

@@ -21,22 +21,22 @@
     "@types/node": "^25.9.0",
     "@vitest/coverage-v8": "^4.1.6",
     "@vitest/eslint-plugin": "^1.6.17",
-    "aws-cdk": "^2.1122.0",
+    "aws-cdk": "^2.1123.0",
     "eslint": "^10.4.0",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-awscdk": "^4.3.3",
     "eslint-plugin-import-x": "^4.16.2",
     "eslint-plugin-promise": "^7.3.0",
     "jiti": "^2.7.0",
-    "tsx": "^4.22.2",
+    "tsx": "^4.22.3",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.59.4",
     "vite": "^8.0.13",
     "vitest": "^4.1.6"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.254.0",
+    "aws-cdk-lib": "^2.255.0",
     "constructs": "^10.6.0"
   },
-  "packageManager": "pnpm@11.1.3"
+  "packageManager": "pnpm@11.3.0"
 }