From 1487e31641bbf31fbd089b405bf3fd4eac1a68f8 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 29 Jul 2026 16:10:39 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/continuous-integration-terraform.yml | 4 ++-- .github/workflows/deploy.yml | 2 +- .github/workflows/environment-matrix-dashboard.yml | 2 +- src/DfE.ExternalApplications.Web/Dockerfile | 4 ++-- .../package-lock.json | 10 +++++----- .../DfE.ExternalApplications.CypressTests/package.json | 10 +++++----- 6 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/continuous-integration-terraform.yml b/.github/workflows/continuous-integration-terraform.yml index c95133db..679d4c6a 100644 --- a/.github/workflows/continuous-integration-terraform.yml +++ b/.github/workflows/continuous-integration-terraform.yml @@ -15,10 +15,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5 - name: Terraform Validate - uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@v1.2.1 + uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@2608ca06a7f06e1869364c028a8d035d23627acc # v1.2.1 with: terraform_version: '1.10.5' tflint_version: 'v0.44.1' diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 7cac5e3a..59534830 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -70,7 +70,7 @@ jobs: needs: [ set-env ] steps: - name: Validate Packages - uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@v1 + uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@769212b22326c2c43b49739b883683f97098e2ea # v1 with: environment: ${{ needs.set-env.outputs.environment }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/environment-matrix-dashboard.yml b/.github/workflows/environment-matrix-dashboard.yml index 040a8d8a..f9fa0b68 100644 --- a/.github/workflows/environment-matrix-dashboard.yml +++ b/.github/workflows/environment-matrix-dashboard.yml @@ -18,7 +18,7 @@ jobs: deployments: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Generate Matrix Table env: diff --git a/src/DfE.ExternalApplications.Web/Dockerfile b/src/DfE.ExternalApplications.Web/Dockerfile index f0646de0..9a7e52d1 100644 --- a/src/DfE.ExternalApplications.Web/Dockerfile +++ b/src/DfE.ExternalApplications.Web/Dockerfile @@ -1,7 +1,7 @@ # See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging. # This stage is used when running from VS in fast mode (Default for Debug configuration) -FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS base +FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:1fa23fc4872d95fd71c2833ebe65d7e84a43b2d51a31d119516852f13d9505a7 AS base USER $APP_UID WORKDIR /app EXPOSE 8080 @@ -10,7 +10,7 @@ EXPOSE 5001 # This stage is used to build the service project -FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build +FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:ed034a8bf0b24ded0cbbac07e17825d8e9ebfe21e308191d0f7421eaf5ad4664 AS build ARG BUILD_CONFIGURATION=Release WORKDIR /src COPY ["src/DfE.ExternalApplications.Web/DfE.ExternalApplications.Web.csproj", "src/DfE.ExternalApplications.Web/"] diff --git a/src/Tests/DfE.ExternalApplications.CypressTests/package-lock.json b/src/Tests/DfE.ExternalApplications.CypressTests/package-lock.json index 410c9599..e9ca4876 100644 --- a/src/Tests/DfE.ExternalApplications.CypressTests/package-lock.json +++ b/src/Tests/DfE.ExternalApplications.CypressTests/package-lock.json @@ -10,16 +10,16 @@ "license": "ISC", "devDependencies": { "@eslint/js": "^10.0.1", - "cypress": "^15.8.1", - "cypress-axe": "^1.7.0", - "cypress-file-upload": "^5.0.8", - "cypress-multi-reporters": "^2.0.4", + "cypress": "15.18.0", + "cypress-axe": "1.7.0", + "cypress-file-upload": "5.0.8", + "cypress-multi-reporters": "2.0.5", "eslint": "^10.6.0", "eslint-plugin-cypress": "^6.4.2", "mochawesome": "^7.1.4", "mochawesome-merge": "^5.1.1", "mochawesome-report-generator": "^6.0.1", - "typescript": "^6.0.3", + "typescript": "6.0.3", "typescript-eslint": "^8.15.0" } }, diff --git a/src/Tests/DfE.ExternalApplications.CypressTests/package.json b/src/Tests/DfE.ExternalApplications.CypressTests/package.json index 50489a62..9a4aecd6 100644 --- a/src/Tests/DfE.ExternalApplications.CypressTests/package.json +++ b/src/Tests/DfE.ExternalApplications.CypressTests/package.json @@ -19,16 +19,16 @@ }, "devDependencies": { "@eslint/js": "^10.0.1", - "cypress": "^15.8.1", - "cypress-axe": "^1.7.0", - "cypress-file-upload": "^5.0.8", - "cypress-multi-reporters": "^2.0.4", + "cypress": "15.18.0", + "cypress-axe": "1.7.0", + "cypress-file-upload": "5.0.8", + "cypress-multi-reporters": "2.0.5", "eslint": "^10.6.0", "eslint-plugin-cypress": "^6.4.2", "mochawesome": "^7.1.4", "mochawesome-merge": "^5.1.1", "mochawesome-report-generator": "^6.0.1", - "typescript": "^6.0.3", + "typescript": "6.0.3", "typescript-eslint": "^8.15.0" }, "overrides": {