Merge pull request #362 from scratchfoundation/renovate/pin-dependencies

chore(deps): pin dependencies

.github/workflows/ci-cd.yml

@@ -29,8 +29,8 @@ jobs:
         AC_USERNAME: ${{ github.ref_name == 'main' && secrets.AC_USERNAME }}
         AC_PASSWORD: ${{ github.ref_name == 'main' && secrets.AC_PASSWORD }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'
@@ -54,7 +54,7 @@ jobs:
             pyenv install 2.7.18
       - name: Setup Keys for Fastlane
         if: matrix.os == 'macos-latest'
-        uses: webfactory/ssh-agent@v0.7.0
+        uses: webfactory/ssh-agent@836c84ec59a0e7bc0eabc79988384eb567561ee2 # v0.7.0
         with:
             ssh-private-key: ${{ secrets.FASTLANE_ACCESS_KEY }}
       - name: Fastlane
@@ -83,7 +83,7 @@ jobs:
           ditto -v -c -k --sequesterRsrc --keepParent --zlibCompressionLevel 9 \
             Scratch*.app ../mas-dev-${NPM_APP_VERSION}.zip
       - name: Upload macOS artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         if: matrix.os == 'macos-latest'
         with:
           name: macOS
@@ -92,7 +92,7 @@ jobs:
             dist/mas/Scratch*.pkg
             dist/mas-dev-*.zip
       - name: Upload Windows artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         if: matrix.os == 'windows-latest'
         with:
           name: Windows

package.json

@@ -28,38 +28,38 @@
     "source-map-support": "^0.5.19"
   },
   "devDependencies": {
-    "@babel/core": "^7.9.6",
+    "@babel/core": "7.21.4",
-    "@babel/plugin-proposal-object-rest-spread": "^7.9.6",
+    "@babel/plugin-proposal-object-rest-spread": "7.20.7",
-    "@babel/plugin-syntax-dynamic-import": "^7.8.3",
+    "@babel/plugin-syntax-dynamic-import": "7.8.3",
-    "@babel/plugin-transform-async-to-generator": "^7.8.3",
+    "@babel/plugin-transform-async-to-generator": "7.20.7",
-    "@babel/plugin-transform-nullish-coalescing-operator": "^7.22.5",
+    "@babel/plugin-transform-nullish-coalescing-operator": "7.22.5",
-    "@babel/plugin-transform-optional-chaining": "^7.22.6",
+    "@babel/plugin-transform-optional-chaining": "7.22.6",
-    "@babel/preset-env": "^7.9.6",
+    "@babel/preset-env": "7.21.4",
-    "@babel/preset-react": "^7.9.4",
+    "@babel/preset-react": "7.18.6",
-    "async": "^3.2.0",
+    "async": "3.2.4",
     "autoprefixer": "9.8.8",
-    "babel-eslint": "^10.1.0",
+    "babel-eslint": "10.1.0",
-    "babel-loader": "^8.1.0",
+    "babel-loader": "8.3.0",
-    "babel-plugin-react-intl": "^7.5.7",
+    "babel-plugin-react-intl": "7.9.4",
-    "copy-webpack-plugin": "^5.1.1",
+    "copy-webpack-plugin": "5.1.2",
-    "electron": "^23.3.12",
+    "electron": "23.3.12",
-    "electron-builder": "^22.13.1",
+    "electron-builder": "22.14.13",
-    "electron-devtools-installer": "^3.2.0",
+    "electron-devtools-installer": "3.2.0",
-    "electron-notarize": "^1.1.1",
+    "electron-notarize": "1.2.2",
-    "electron-store": "^8.0.1",
+    "electron-store": "8.1.0",
-    "electron-webpack": "^2.8.2",
+    "electron-webpack": "2.8.2",
-    "eslint": "^8.0.0",
+    "eslint": "8.55.0",
-    "eslint-config-scratch": "^9.0.0",
+    "eslint-config-scratch": "9.0.3",
     "eslint-plugin-import": "2.27.5",
-    "eslint-plugin-react": "^7.20.0",
+    "eslint-plugin-react": "7.32.2",
-    "fs-extra": "^9.0.1",
+    "fs-extra": "9.1.0",
     "intl": "1.2.5",
-    "lodash.bindall": "^4.4.0",
+    "lodash.bindall": "4.4.0",
-    "lodash.defaultsdeep": "^4.6.1",
+    "lodash.defaultsdeep": "4.6.1",
-    "minilog": "^3.1.0",
+    "minilog": "3.1.0",
-    "minimist": "^1.2.5",
+    "minimist": "1.2.8",
-    "mkdirp": "^1.0.4",
+    "mkdirp": "1.0.4",
-    "nets": "^3.2.0",
+    "nets": "3.2.0",
     "postcss-import": "12.0.1",
     "postcss-simple-vars": "5.0.2",
     "react": "16.14.0",
@@ -67,10 +67,10 @@
     "react-intl": "2.9.0",
     "react-redux": "5.1.2",
     "redux": "3.7.2",
-    "rimraf": "^3.0.2",
+    "rimraf": "3.0.2",
     "scratch-gui": "github:scratchfoundation/scratch-gui#scratch-desktop-v3.30.1",
-    "uuid": "^8.0.0",
+    "uuid": "8.3.2",
-    "webpack": "^4.43.0",
+    "webpack": "4.46.0",
     "webpack-merge": "4.2.2"
   },
   "resolutions": {