chore(deps): pin dependencies (#1)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@eslint/js](https://eslint.org) ([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js)) | devDependencies | pin | [`^9.16.0` -> `9.16.0`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.16.0/9.16.0) | | [@release-it/conventional-changelog](https://redirect.github.com/release-it/conventional-changelog) | devDependencies | pin | [`^9.0.3` -> `9.0.3`](https://renovatebot.com/diffs/npm/@release-it%2fconventional-changelog/9.0.3/9.0.3) | | [@types/eslint__js](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/eslint__js) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/eslint__js)) | devDependencies | pin | [`^8.42.3` -> `8.42.3`](https://renovatebot.com/diffs/npm/@types%2feslint__js/8.42.3/8.42.3) | | [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | devDependencies | pin | [`^22.10.1` -> `22.10.1`](https://renovatebot.com/diffs/npm/@types%2fnode/22.10.1/22.10.1) | | [@vitest/coverage-v8](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/coverage-v8#readme) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)) | devDependencies | pin | [`^2.1.8` -> `2.1.8`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-v8/2.1.8/2.1.8) | | [@vitest/eslint-plugin](https://redirect.github.com/vitest-dev/eslint-plugin-vitest) | devDependencies | pin | [`^1.1.14` -> `1.1.14`](https://renovatebot.com/diffs/npm/@vitest%2feslint-plugin/1.1.14/1.1.14) | | [JoshuaKGoldberg/all-contributors-auto-action](https://redirect.github.com/JoshuaKGoldberg/all-contributors-auto-action) | action | pinDigest | -> `944abe4` | | [JoshuaKGoldberg/release-it-action](https://redirect.github.com/JoshuaKGoldberg/release-it-action) | action | pinDigest | -> `77373cf` | | [actions-ecosystem/action-remove-labels](https://redirect.github.com/actions-ecosystem/action-remove-labels) | action | pinDigest | -> `2ce5d41` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | -> `11bd719` | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | pinDigest | -> `39370e3` | | [apexskier/github-release-commenter](https://redirect.github.com/apexskier/github-release-commenter) | action | pinDigest | -> `3bd413a` | | [console-fail-test](https://redirect.github.com/JoshuaKGoldberg/console-fail-test) | devDependencies | pin | [`^0.5.0` -> `0.5.0`](https://renovatebot.com/diffs/npm/console-fail-test/0.5.0/0.5.0) | | [eslint](https://eslint.org) ([source](https://redirect.github.com/eslint/eslint)) | devDependencies | pin | [`^9.16.0` -> `9.16.0`](https://renovatebot.com/diffs/npm/eslint/9.16.0/9.16.0) | | [eslint-plugin-n](https://redirect.github.com/eslint-community/eslint-plugin-n) | devDependencies | pin | [`^17.14.0` -> `17.14.0`](https://renovatebot.com/diffs/npm/eslint-plugin-n/17.14.0/17.14.0) | | [github/accessibility-alt-text-bot](https://redirect.github.com/github/accessibility-alt-text-bot) | action | pinDigest | -> `602a5ef` | | [husky](https://redirect.github.com/typicode/husky) | devDependencies | pin | [`^9.1.7` -> `9.1.7`](https://renovatebot.com/diffs/npm/husky/9.1.7/9.1.7) | | [knip](https://knip.dev) ([source](https://redirect.github.com/webpro-nl/knip/tree/HEAD/packages/knip)) | devDependencies | pin | [`^5.39.2` -> `5.39.2`](https://renovatebot.com/diffs/npm/knip/5.39.2/5.39.2) | | [lint-staged](https://redirect.github.com/lint-staged/lint-staged) | devDependencies | pin | [`^15.2.10` -> `15.2.10`](https://renovatebot.com/diffs/npm/lint-staged/15.2.10/15.2.10) | | [prettier](https://prettier.io) ([source](https://redirect.github.com/prettier/prettier)) | devDependencies | pin | [`^3.4.2` -> `3.4.2`](https://renovatebot.com/diffs/npm/prettier/3.4.2/3.4.2) | | [prettier-plugin-curly](https://redirect.github.com/JoshuaKGoldberg/prettier-plugin-curly) | devDependencies | pin | [`^0.3.1` -> `0.3.1`](https://renovatebot.com/diffs/npm/prettier-plugin-curly/0.3.1/0.3.1) | | [prettier-plugin-packagejson](https://redirect.github.com/matzkoh/prettier-plugin-packagejson) | devDependencies | pin | [`^2.5.6` -> `2.5.6`](https://renovatebot.com/diffs/npm/prettier-plugin-packagejson/2.5.6/2.5.6) | | [prettier-plugin-sh](https://redirect.github.com/un-ts/prettier/tree/master/packages/sh) ([source](https://redirect.github.com/un-ts/prettier)) | devDependencies | pin | [`^0.14.0` -> `0.14.0`](https://renovatebot.com/diffs/npm/prettier-plugin-sh/0.14.0/0.14.0) | | [release-it](https://redirect.github.com/release-it/release-it) | devDependencies | pin | [`^17.10.0` -> `17.10.0`](https://renovatebot.com/diffs/npm/release-it/17.10.0/17.10.0) | | [tsup](https://tsup.egoist.dev/) ([source](https://redirect.github.com/egoist/tsup)) | devDependencies | pin | [`^8.3.5` -> `8.3.5`](https://renovatebot.com/diffs/npm/tsup/8.3.5/8.3.5) | | [typescript](https://www.typescriptlang.org/) ([source](https://redirect.github.com/microsoft/TypeScript)) | devDependencies | pin | [`^5.7.2` -> `5.7.2`](https://renovatebot.com/diffs/npm/typescript/5.7.2/5.7.2) | | [typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint) ([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)) | devDependencies | pin | [`^8.17.0` -> `8.17.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.17.0/8.17.0) | | [vitest](https://redirect.github.com/vitest-dev/vitest) ([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)) | devDependencies | pin | [`^2.1.8` -> `2.1.8`](https://renovatebot.com/diffs/npm/vitest/2.1.8/2.1.8) | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/markEHVN/example-npm-package).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
markEHVN · Dec 6, 2024 · f1f8038 · f1f8038
1 parent d99a371
commit f1f8038
Show file tree

Hide file tree

Showing 9 changed files with 57 additions and 57 deletions.
diff --git a/.github/actions/prepare/action.yml b/.github/actions/prepare/action.yml
@@ -5,7 +5,7 @@ name: Prepare
 runs:
   steps:
     - uses: pnpm/action-setup@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         cache: pnpm
         node-version: "20"

diff --git a/.github/workflows/accessibility-alt-text-bot.yml b/.github/workflows/accessibility-alt-text-bot.yml
@@ -3,7 +3,7 @@ jobs:
     if: ${{ !endsWith(github.actor, '[bot]') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: github/[email protected]
+      - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0
 
 name: Accessibility Alt Text Bot
 

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -3,44 +3,44 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: node ./lib/index.js
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint
   lint_knip:
     name: Lint Knip
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:knip
   prettier:
     name: Prettier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm format --list-different
   test:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run test --coverage
       - uses: codecov/codecov-action@v3
   type_check:
     name: Type Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm tsc
 

diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
@@ -2,13 +2,13 @@ jobs:
   contributors:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - uses: ./.github/actions/prepare
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
-        uses: JoshuaKGoldberg/[email protected]
+        uses: JoshuaKGoldberg/all-contributors-auto-action@944abe4387e751b5bbb38616cb25cf4a4ca998f2 # v0.5.0
 
 name: Contributors
 

diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml
@@ -2,11 +2,11 @@ jobs:
   post_release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV"
-      - uses: apexskier/github-release-commenter@v1
+      - uses: apexskier/github-release-commenter@3bd413ad5e1d603bfe2282f9f06f2bdcec079327 # v1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           comment-template: |

diff --git a/.github/workflows/pr-review-requested.yml b/.github/workflows/pr-review-requested.yml
@@ -2,7 +2,7 @@ jobs:
   pr_review_requested:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1
         with:
           labels: "status: waiting for author"
       - if: failure()

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,7 +5,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
           ref: main
@@ -14,7 +14,7 @@ jobs:
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        uses: JoshuaKGoldberg/[email protected]
+        uses: JoshuaKGoldberg/release-it-action@77373cfc2535e21149518381cb09e1c04c6068fe # v0.2.2
 
 name: Release
 

diff --git a/package.json b/package.json
@@ -31,27 +31,27 @@
 		"*": "prettier --ignore-unknown --write"
 	},
 	"devDependencies": {
-		"@eslint/js": "^9.16.0",
-		"@release-it/conventional-changelog": "^9.0.3",
-		"@types/eslint__js": "^8.42.3",
-		"@types/node": "^22.10.1",
-		"@vitest/coverage-v8": "^2.1.8",
-		"@vitest/eslint-plugin": "^1.1.14",
-		"console-fail-test": "^0.5.0",
-		"eslint": "^9.16.0",
-		"eslint-plugin-n": "^17.14.0",
-		"husky": "^9.1.7",
-		"knip": "^5.39.2",
-		"lint-staged": "^15.2.10",
-		"prettier": "^3.4.2",
-		"prettier-plugin-curly": "^0.3.1",
-		"prettier-plugin-packagejson": "^2.5.6",
-		"prettier-plugin-sh": "^0.14.0",
-		"release-it": "^17.10.0",
-		"tsup": "^8.3.5",
-		"typescript": "^5.7.2",
-		"typescript-eslint": "^8.17.0",
-		"vitest": "^2.1.8"
+		"@eslint/js": "9.16.0",
+		"@release-it/conventional-changelog": "9.0.3",
+		"@types/eslint__js": "8.42.3",
+		"@types/node": "22.10.1",
+		"@vitest/coverage-v8": "2.1.8",
+		"@vitest/eslint-plugin": "1.1.14",
+		"console-fail-test": "0.5.0",
+		"eslint": "9.16.0",
+		"eslint-plugin-n": "17.14.0",
+		"husky": "9.1.7",
+		"knip": "5.39.2",
+		"lint-staged": "15.2.10",
+		"prettier": "3.4.2",
+		"prettier-plugin-curly": "0.3.1",
+		"prettier-plugin-packagejson": "2.5.6",
+		"prettier-plugin-sh": "0.14.0",
+		"release-it": "17.10.0",
+		"tsup": "8.3.5",
+		"typescript": "5.7.2",
+		"typescript-eslint": "8.17.0",
+		"vitest": "2.1.8"
 	},
 	"packageManager": "[email protected]+sha512.6e2baf77d06b9362294152c851c4f278ede37ab1eba3a55fda317a4a17b209f4dbb973fb250a77abc463a341fcb1f17f17cfa24091c4eb319cda0d9b84278387",
 	"engines": {

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml