fix(deps): pin dependencies

Author: renovate[bot]

.github/workflows/bump-versions-and-tag.yml

@@ -18,18 +18,18 @@ jobs:
   version_packages:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           # Need custom service user token to allow bypassing default branch protection rules
           # to push a bumped version directly to default branch (master/main)
           token: ${{ secrets.SERVICE_USER_GIT_TOKEN }}
 
       - name: Configure git credentials
-        uses: OleksiyRudenko/gha-git-credentials@v2
+        uses: OleksiyRudenko/gha-git-credentials@6132cfce45156e2c1562673f9be1a91a575ce879 # v2
         with:
           token: ${{ secrets.SERVICE_USER_GIT_TOKEN }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: "24.x"
 

.github/workflows/ci.yml

@@ -21,8 +21,8 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: ${{ matrix.node_version }}
           cache: 'npm'

.github/workflows/commitlint.yml

@@ -14,8 +14,8 @@ jobs:
   commitlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: wagoid/commitlint-github-action@v6
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed # v6
         with:
           # https://github.com/wagoid/commitlint-github-action?tab=readme-ov-file#commitdepth
           commitDepth: '1'

.github/workflows/release.yml

@@ -13,8 +13,8 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '24.x'
           # This `registry-url` resolves an issue with lerna publishing:
@@ -37,6 +37,6 @@ jobs:
         run: node ./scripts/extract-last-ver-changelog.mjs
 
       - name: Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           body_path: last-ver-changelog.txt

package-lock.json

@@ -45,23 +45,23 @@
     "@typescript-eslint/eslint-plugin": "8.31.1",
     "@typescript-eslint/parser": "8.31.1",
     "@vitejs/plugin-vue": "5.2.4",
-    "@babel/eslint-parser": "^7.11.0",
-    "copyfiles": "^2.4.1",
+    "@babel/eslint-parser": "7.28.5",
+    "copyfiles": "2.4.1",
     "coveralls": "3.1.1",
     "cz-conventional-changelog": "3.3.0",
-    "eslint": "^8.57.0",
-    "eslint-plugin-vue": "^9.23.0",
+    "eslint": "8.57.1",
+    "eslint-plugin-vue": "9.33.0",
     "husky": "9.1.7",
-    "jest-serializer-vue": "^3.1.0",
+    "jest-serializer-vue": "3.1.0",
     "lerna": "9.0.3",
     "lint-staged": "15.5.1",
     "npm-run-all": "4.1.5",
     "prettier": "3.0.1",
     "rimraf": "5.0.10",
-    "sass": "^1.63.6",
+    "sass": "1.94.2",
     "shx": "0.4.0",
-    "typescript": "^5.2.2",
+    "typescript": "5.8.3",
     "vite": "6.3.4",
-    "yorkie": "^2.0.0"
+    "yorkie": "2.0.0"
   }
 }

package.json

@@ -30,11 +30,11 @@
     "test": "jest -w 1"
   },
   "dependencies": {
-    "strip-ansi": "^6.0.0",
-    "vite-plugin-css-injected-by-js": "^3.2.0",
-    "vue": "^3.3.4"
+    "strip-ansi": "6.0.1",
+    "vite-plugin-css-injected-by-js": "3.5.2",
+    "vue": "3.5.25"
   },
   "devDependencies": {
-    "@babel/preset-typescript": "^7.26.0"
+    "@babel/preset-typescript": "7.28.5"
   }
 }

packages/auto-complete-plugin/package.json

@@ -54,20 +54,20 @@
     "last 2 versions"
   ],
   "dependencies": {
-    "lodash": "^4.17.21",
-    "strip-ansi": "^6.0.0",
-    "vue": "^3.3.4",
-    "vuetify": "^3.4.0"
+    "lodash": "4.17.21",
+    "strip-ansi": "6.0.1",
+    "vue": "3.5.25",
+    "vuetify": "3.11.3"
   },
   "devDependencies": {
-    "@babel/preset-env": "^7.22.5",
+    "@babel/preset-env": "7.28.5",
     "@vue/test-utils": "2.4.6",
-    "@vue/vue3-jest": "^29.2.4",
-    "babel-jest": "^29.5.0",
-    "jest": "^29.5.0",
-    "jest-environment-jsdom": "^29.5.0",
-    "jest-junit": "^16.0.0",
-    "jest-serializer-vue": "^3.1.0",
-    "jest-transform-stub": "^2.0.0"
+    "@vue/vue3-jest": "29.2.6",
+    "babel-jest": "29.7.0",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
+    "jest-junit": "16.0.0",
+    "jest-serializer-vue": "3.1.0",
+    "jest-transform-stub": "2.0.0"
   }
 }

packages/controls-navigator/package.json

@@ -36,6 +36,6 @@
     "test": "jest -w 1"
   },
   "dependencies": {
-    "vue": "^3.3.4"
+    "vue": "3.5.25"
   }
 }

packages/file-browser-plugin/package.json

@@ -34,6 +34,6 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "vue": "^3.3.4"
+    "vue": "3.5.25"
   }
 }