Merge pull request #1 from Pocket/renovate/pin-dependencies

chore(deps): pin dependencies

.github/workflows/linter.yml

@@ -37,14 +37,14 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # tag=v2
 
       ##########################
       # Github Super Linter needs
       # the latest definitions installed
       ##########################
       - name: Use Node.js 16.x
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a # tag=v3
         with:
           node-version: 16.x
       # Install our eslint packages.
@@ -57,7 +57,7 @@ jobs:
       - name: Lint Code Base
 
         # We use the Github super linter, it can be cranky at times, so in that moment here are the docs https://github.com/github/super-linter
-        uses: docker://ghcr.io/github/super-linter:slim-v4
+        uses: docker://ghcr.io/github/super-linter:slim-v4@sha256:79524dcb8c1d321dfe4a66598aa4447d033cca9423d90be9d4e8dd91cb7e69fc
 
         # All Environment variables are defined here https://github.com/github/super-linter#environment-variables
         env:

.github/workflows/publish.yml

@@ -12,16 +12,16 @@ jobs:
   validator:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: RoadieHQ/[email protected]
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # tag=v2
+      - uses: RoadieHQ/backstage-entity-validator@70da3dfb77cb4d0e150b9f6de953b806837d16df # tag=v0.3.2
         with:
           path: 'catalog-info.yaml'
 
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/[email protected]
+      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # tag=v2
+      - uses: actions/setup-node@270253e841af726300e85d718a5f606959b2903c # tag=v2.4.1
         with:
           node-version: '16.x'
           registry-url: 'https://registry.npmjs.org'

package.json

@@ -15,10 +15,10 @@
     "typescript": "4.6.2"
   },
   "devDependencies": {
-    "@pocket-tools/eslint-config": "^1.1.0",
-    "@semantic-release/changelog": "^6.0.1",
-    "@semantic-release/git": "^10.0.1",
-    "semantic-release": "^19.0.2",
+    "@pocket-tools/eslint-config": "1.1.0",
+    "@semantic-release/changelog": "6.0.1",
+    "@semantic-release/git": "10.0.1",
+    "semantic-release": "19.0.2",
     "typescript": "4.6.2"
   },
   "publishConfig": {