Merge pull request #86 from pactflow/gh-renovate/pin-dependencies

chore(deps): pin dependencies

Author: YOU54F

.github/workflows/build.yml

@@ -16,8 +16,8 @@ jobs:
   Test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           node-version: '18'
       - name: Install
@@ -33,15 +33,15 @@ jobs:
     continue-on-error: true
     steps:
       - run: docker pull pactfoundation/pact-cli:latest
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check if verification exists
         # Raises an error and does not continue if the verification already exists
         # Because continue-on-error is set to true, this will not fail the overall build however
         run: "! make check_if_successfull_verification_exists"
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           repository: pactflow/example-provider
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           node-version: '18'
       - name: Install
@@ -62,7 +62,7 @@ jobs:
       runs-on: ubuntu-latest
       needs: Verify
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         - run: docker pull pactfoundation/pact-cli:latest
         - name: Can I deploy?
           run: make can_i_deploy
@@ -73,7 +73,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: Can-I-Deploy
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: docker pull pactfoundation/pact-cli:latest
       - name: Deploy
         run: GIT_BRANCH=${GITHUB_REF:11} make deploy

package-lock.json

@@ -37,17 +37,17 @@
   "devDependencies": {
     "@pact-foundation/pact": "14.0.0",
     "@testing-library/jest-dom": "4.2.4",
-    "@typescript-eslint/eslint-plugin": "^2.16.0",
-    "@typescript-eslint/parser": "^2.16.0",
-    "babel-eslint": "^10.1.0",
-    "eslint": "^6.8.0",
-    "eslint-config-react-app": "^5.1.0",
-    "eslint-plugin-flowtype": "^3.13.0",
-    "eslint-plugin-import": "^2.20.0",
-    "eslint-plugin-jsx-a11y": "^6.2.3",
-    "eslint-plugin-react": "^7.17.0",
-    "eslint-plugin-react-hooks": "^1.7.0",
-    "nock": "^14.0.0",
-    "dotenv": "^8.2.0"
+    "@typescript-eslint/eslint-plugin": "2.16.0",
+    "@typescript-eslint/parser": "2.16.0",
+    "babel-eslint": "10.1.0",
+    "eslint": "6.8.0",
+    "eslint-config-react-app": "5.1.0",
+    "eslint-plugin-flowtype": "3.13.0",
+    "eslint-plugin-import": "2.31.0",
+    "eslint-plugin-jsx-a11y": "6.10.2",
+    "eslint-plugin-react": "7.37.4",
+    "eslint-plugin-react-hooks": "1.7.0",
+    "nock": "14.0.1",
+    "dotenv": "8.2.0"
   }
 }