fix(deps): pin dependencies

.github/workflows/ci.yml

@@ -27,12 +27,12 @@ jobs:
 
     steps:
       # using `v1` because of: https://github.com/actions/checkout/issues/246
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1
         with:
           # See: https://github.com/changesets/action/issues/187#issuecomment-1228413850
           token: ${{ secrets.BOT_GITHUB_TOKEN }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
         with:
           node-version: ${{ matrix.node_version }}
 
@@ -88,7 +88,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
 
       - name: upload build artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
         id: upload_build_artifacts
         with:
           name: all-vsix
@@ -97,7 +97,7 @@ jobs:
           retention-days: ${{ env.artifact-retention-days }}
 
       - name: Find PR Comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
         if: github.event_name == 'pull_request'
         id: find-pr-comment
         with:
@@ -106,7 +106,7 @@ jobs:
           body-includes: ${{ env.retention-comment }}
 
       - name: Create / Update PR Comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
         if: github.event_name == 'pull_request'
         env:
           HEAD_SHA: ${{ github.sha }}

.github/workflows/commitlint.yml

@@ -14,7 +14,7 @@ jobs:
   commitlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
         with:
           fetch-depth: 0
-      - uses: wagoid/commitlint-github-action@v4
+      - uses: wagoid/commitlint-github-action@416045160973f9fff174ac6698412cfe7181c3f3 # v4

package.json

@@ -42,37 +42,37 @@
   "devDependencies": {
     "@commitlint/cli": "19.5.0",
     "@commitlint/config-conventional": "19.5.0",
-    "@types/chai": "^4.3.17",
-    "@types/chai-as-promised": "^7.1.4",
-    "@types/deep-equal-in-any-order": "^1.0.1",
+    "@types/chai": "4.3.17",
+    "@types/chai-as-promised": "7.1.4",
+    "@types/deep-equal-in-any-order": "1.0.1",
     "@types/lodash": "4.14.177",
-    "@types/mocha": "^10.0.7",
-    "@types/node": "^16.10.3",
-    "@types/sinon": "^17.0.3",
+    "@types/mocha": "10.0.7",
+    "@types/node": "16.11.10",
+    "@types/sinon": "17.0.3",
     "@types/vscode": "1.75.0",
     "@typescript-eslint/eslint-plugin": "4.33.0",
     "@typescript-eslint/parser": "4.33.0",
     "@changesets/cli": "2.27.11",
-    "chai": "^4.3.4",
-    "chai-as-promised": "^7.1.1",
-    "coveralls": "^3.1.1",
-    "deep-equal-in-any-order": "^1.1.15",
+    "chai": "4.5.0",
+    "chai-as-promised": "7.1.1",
+    "coveralls": "3.1.1",
+    "deep-equal-in-any-order": "1.1.15",
     "eslint": "7.30.0",
     "eslint-config-prettier": "8.3.0",
     "eslint-plugin-eslint-comments": "3.2.0",
-    "glob": "^7.2.0",
+    "glob": "7.2.0",
     "husky": "7.0.4",
     "lint-staged": "11.2.0",
-    "make-dir": "^3.1.0",
-    "mocha": "^10.7.3",
+    "make-dir": "3.1.0",
+    "mocha": "10.7.3",
     "npm-run-all": "4.1.5",
-    "nyc": "^15.1.0",
+    "nyc": "15.1.0",
     "prettier": "2.4.1",
     "proxyquire": "2.1.3",
-    "rimraf": "^3.0.2",
-    "shx": "^0.3.3",
-    "sinon": "^18.0.0",
-    "typescript": "^4.4.3",
+    "rimraf": "3.0.2",
+    "shx": "0.3.3",
+    "sinon": "18.0.0",
+    "typescript": "4.5.2",
     "vsce": "1.100.1",
     "webpack": "5.96.1",
     "webpack-cli": "5.1.4",

packages/app-studio-toolkit/package.json

@@ -381,7 +381,7 @@
     "@sap/bas-sdk": "3.11.4",
     "@vscode-logging/wrapper": "2.0.0",
     "applicationinsights": "2.9.6",
-    "axios": "^1.7.4",
+    "axios": "1.7.5",
     "body-parser": "1.20.3",
     "cors": "2.8.5",
     "express": "4.19.2",
@@ -391,17 +391,17 @@
     "ts-enum-util": "4.0.2",
     "url-join": "4.0.1",
     "uuid": "9.0.1",
-    "websocket": "^1.0.34"
+    "websocket": "1.0.34"
   },
   "devDependencies": {
     "@sap-devx/app-studio-toolkit-types": "workspace:*",
     "@types/body-parser": "1.19.5",
-    "@types/cors": "^2.8.13",
+    "@types/cors": "2.8.13",
     "@types/express": "4.17.17",
     "@types/http-terminator": "2.0.5",
     "@types/proxyquire": "1.3.28",
     "@types/url-join": "4.0.1",
-    "@types/uuid": "^9.0.8",
+    "@types/uuid": "9.0.8",
     "@types/websocket": "1.0.5",
     "@vscode-logging/types": "0.1.4",
     "copy-webpack-plugin": "11.0.0",

packages/npm-dependencies-validation/package.json

@@ -32,11 +32,11 @@
   "dependencies": {
     "fs-extra": "10.0.0",
     "lodash": "4.17.21",
-    "semver": "^7.6.3"
+    "semver": "7.6.3"
   },
   "devDependencies": {
-    "@types/fs-extra": "^9.0.13",
-    "@types/semver": "^7.5.8",
-    "type-fest": "^2.11.1"
+    "@types/fs-extra": "9.0.13",
+    "@types/semver": "7.5.8",
+    "type-fest": "2.11.1"
   }
 }

packages/vscode-dependencies-validation/package.json

@@ -74,16 +74,16 @@
     "@vscode-logging/wrapper": "2.0.0",
     "fs-extra": "10.0.0",
     "jsonc-parser": "3.0.0",
-    "lodash": "^4.17.21",
+    "lodash": "4.17.21",
     "ts-essentials": "9.1.2",
     "vscode-languageserver-textdocument": "1.0.4"
   },
   "devDependencies": {
-    "@types/fs-extra": "^9.0.13",
-    "@types/proxyquire": "^1.3.28",
+    "@types/fs-extra": "9.0.13",
+    "@types/proxyquire": "1.3.28",
     "@vscode-logging/types": "2.0.0",
     "jest-mock-vscode": "^0.1.3",
     "proxyquire": "2.1.3",
-    "vscode-uri": "^3.0.3"
+    "vscode-uri": "3.0.3"
   }
 }

packages/vscode-deps-upgrade-tool/package.json

@@ -75,21 +75,21 @@
     "package": "node ./scripts/package-vsix.js"
   },
   "dependencies": {
-    "@types/fs-extra": "^9.0.13",
+    "@types/fs-extra": "9.0.13",
     "@vscode-logging/wrapper": "1.0.1",
     "delay": "5.0.0",
-    "fs-extra": "^10.0.1",
+    "fs-extra": "10.0.1",
     "jsonc-parser": "3.0.0",
     "lodash": "4.17.21",
     "semver": "7.5.2",
     "validate-npm-package-name": "3.0.0"
   },
   "devDependencies": {
     "@sap-devx/app-studio-toolkit-types": "workspace:*",
-    "@types/semver": "^7.3.12",
-    "@types/validate-npm-package-name": "^3.0.3",
-    "@vscode-logging/types": "^0.1.4",
+    "@types/semver": "7.3.12",
+    "@types/validate-npm-package-name": "3.0.3",
+    "@vscode-logging/types": "0.1.4",
     "type-fest": "2.11.1",
-    "vscode-uri": "^3.0.3"
+    "vscode-uri": "3.0.3"
   }
 }