chore(deps): pin dependencies

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
 
@@ -28,13 +28,13 @@ jobs:
         run: npx nx-cloud start-ci-run --distribute-on="3 linux-medium-js" --stop-agents-after="build"
 
       # Cache node_modules
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4
         with:
           node-version: 20
           cache: 'npm'
 
       - run: npm ci
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@be2a36618456ad6f3abf921eb24900817da1af6b # v4
 
       # Prepend any command with "nx-cloud record --" to record its logs to Nx Cloud
       - run: npx nx-cloud record -- nx format:check

.github/workflows/codeql-analysis.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL

.gitlab-ci.yml

@@ -7,7 +7,7 @@ workflow:
     on_new_commit: conservative
 
 default:
-  image: node:20
+  image: node:20@sha256:18ad6b547976c931c7374c2f7b0a1dd27eda7b55dbf41c9cdb35fe4081996652
 
 variables:
   CI: 'true'

package.json

@@ -47,8 +47,8 @@
     "@swc-node/register": "1.9.2",
     "@swc/cli": "0.3.12",
     "@swc/core": "1.5.7",
-    "@swc/helpers": "~0.5.11",
-    "@swc/jest": "~0.2.36",
+    "@swc/helpers": "0.5.11",
+    "@swc/jest": "0.2.36",
     "@types/jest": "29.5.12",
     "@types/node": "18.19.43",
     "@types/semver": "7.5.8",
@@ -69,10 +69,10 @@
     "prettier": "2.8.8",
     "ts-jest": "29.2.4",
     "ts-node": "10.9.2",
-    "tsx": "^4.17.0",
+    "tsx": "4.17.0",
     "typescript": "5.5.4",
     "validate-branch-name": "1.3.1",
-    "verdaccio": "^5.31.1"
+    "verdaccio": "5.32.1"
   },
   "nx": {
     "includedScripts": []

plugins/nx-container/tests/Dockerfile

@@ -1,3 +1,3 @@
-FROM alpine
+FROM alpine@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
 
 RUN echo "Hello world!"