- Update all non-major dependencies with digest and pinDigest

blumilksoftware · Aug 2, 2024 · 5d90ceb · 5d90ceb
1 parent 6eff7c5
commit 5d90ceb
Show file tree

Hide file tree

Showing 12 changed files with 529 additions and 520 deletions.
diff --git a/.github/workflows/check.js.yml b/.github/workflows/check.js.yml
@@ -19,17 +19,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/[email protected] # https://github.com/actions/checkout
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 # https://github.com/actions/checkout
 
       - name: Cache dependencies
-        uses: actions/[email protected] # https://github.com/actions/cache
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 # https://github.com/actions/cache
         with:
           path: node_modules
           key: ${{ runner.os }}-npm-dependencies-${{ hashFiles('package.lock') }}
           restore-keys: ${{ runner.os }}-npm-dependencies
 
       - name: Set up node
-        uses: actions/[email protected].2 # https://github.com/actions/setup-node
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 # https://github.com/actions/setup-node
         with:
           node-version: 22
 

diff --git a/.github/workflows/check.php.yml b/.github/workflows/check.php.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       pgsql:
-        image: postgres:16.1-alpine3.18 # https://hub.docker.com/_/postgres
+        image: postgres:16.3-alpine3.18@sha256:64e18e8fb3e9c9aac89ac590c5dd8306b862478404f76cd9b5f7720d012b4c47 # https://hub.docker.com/_/postgres
         env:
           POSTGRES_DB: website-ci
           POSTGRES_USER: website-ci
@@ -34,20 +34,20 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/[email protected] # https://github.com/actions/checkout
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 # https://github.com/actions/checkout
 
       - name: Validate composer.json and composer.lock
         run: composer validate
 
       - name: Cache dependencies
-        uses: actions/[email protected] # https://github.com/actions/cache
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 # https://github.com/actions/cache
         with:
           path: vendor
           key: ${{ runner.os }}-composer-dependencies-${{ hashFiles('composer.lock') }}
           restore-keys: ${{ runner.os }}-composer-dependencies
 
       - name: Setup PHP
-        uses: shivammathur/[email protected].0 # https://github.com/shivammathur/setup-php
+        uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # 2.31.1 # https://github.com/shivammathur/setup-php
         with:
           php-version: 8.3
           extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, pdo_pgsql, intl

diff --git a/.github/workflows/deploy-to-beta.yml b/.github/workflows/deploy-to-beta.yml
@@ -24,7 +24,7 @@ jobs:
         run: echo "BRANCH_NAME=$GITHUB_REF_NAME" >> $GITHUB_ENV
 
       - name: checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
           ref: ${{ env.BRANCH_NAME }}
@@ -39,10 +39,10 @@ jobs:
         run: echo "DEPLOYMENT_PROJECT_VERSION=$(bash ./environment/prod/deployment/scripts/version.sh --long)" >> $GITHUB_ENV
 
       - name: set up Docker Buildx
-        uses: docker/setup-buildx-action@v3.3.0
+        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
 
       - name: login to GitHub Container Registry
-        uses: docker/login-action@v3.2.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ${{ env.DOCKER_REGISTRY }}
           username: ${{ env.DOCKER_REGISTRY_USER_NAME }}
@@ -53,15 +53,15 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/[email protected]
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
         with:
           images: ${{ env.DOCKER_IMAGE_NAME }}
           tags: |
             type=raw,value=beta
           context: workflow
 
       - name: build and push image
-        uses: docker/build-push-action@v6.2.0
+        uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0
         with:
           context: .
           file: ./environment/prod/app/Dockerfile
@@ -73,7 +73,7 @@ jobs:
           cache-to: type=gha, ref=${{ env.DOCKER_IMAGE_NAME }}-beta-build-cache, mode=max
 
       - name: copy files via ssh
-        uses: appleboy/[email protected]
+        uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634 # v0.1.7
         with:
           timeout: 10s
           command_timeout: 10m
@@ -87,7 +87,7 @@ jobs:
           rm: true
 
       - name: run deployment script over ssh
-        uses: appleboy/[email protected]
+        uses: appleboy/ssh-action@029f5b4aeeeb58fdfe1410a5d17f967dacf36262 # v1.0.3
         with:
           timeout: 10s
           command_timeout: 10m

diff --git a/.github/workflows/title.yml b/.github/workflows/title.yml
@@ -14,4 +14,4 @@ jobs:
     name: Check the PR title
     runs-on: ubuntu-20.04
     steps:
-      - uses: blumilksoftware/[email protected]
+      - uses: blumilksoftware/action-pr-title@e05fc76a1cc45b33644f1de51218be43ac121dd0 # v1.2.0
diff --git a/composer.json b/composer.json
@@ -9,25 +9,25 @@
         "php": "^8.3",
         "ext-intl": "*",
         "ext-pdo": "*",
-        "codezero/laravel-localized-routes": "^4.0",
-        "codezero/laravel-unique-translation": "^4.3",
-        "filament/filament": "^3.2",
-        "filament/spatie-laravel-translatable-plugin": "^3.2",
-        "guzzlehttp/guzzle": "^7.8",
-        "laravel/framework": "^11.0",
-        "laravel/sanctum": "^4.0",
+        "codezero/laravel-localized-routes": "^4.0.1",
+        "codezero/laravel-unique-translation": "^4.3.1",
+        "filament/filament": "^3.2.96",
+        "filament/spatie-laravel-translatable-plugin": "^3.2.96",
+        "guzzlehttp/guzzle": "^7.9.2",
+        "laravel/framework": "^11.18.1",
+        "laravel/sanctum": "^4.0.2",
         "laravel/tinker": "^2.9",
-        "mvenghaus/filament-plugin-translatable-inline": "^3.0",
-        "nesbot/carbon": "^3.5"
+        "mvenghaus/filament-plugin-translatable-inline": "^3.0.8",
+        "nesbot/carbon": "^3.7.0"
     },
     "require-dev": {
-        "blumilksoftware/codestyle": "^3.2",
-        "fakerphp/faker": "^1.23",
-        "mockery/mockery": "^1.6",
-        "nunomaduro/collision": "^8.1",
-        "larastan/larastan": "^2.9",
-        "phpunit/phpunit": "^11.1",
-        "spatie/laravel-ignition": "^2.4"
+        "blumilksoftware/codestyle": "^3.2.1",
+        "fakerphp/faker": "^1.23.1",
+        "mockery/mockery": "^1.6.12",
+        "nunomaduro/collision": "^8.3.0",
+        "larastan/larastan": "^2.9.8",
+        "phpunit/phpunit": "^11.2.8",
+        "spatie/laravel-ignition": "^2.8.0"
     },
     "autoload": {
         "psr-4": {