chore(deps): pin dependencies

.drone.yml

@@ -15,19 +15,19 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse:3.0.2-debian
+    image: fsfe/reuse:3.0.2-debian@sha256:a0dca4eb014908af80608c06de3470b770a9c97f91041777d0c1cfbfeb8709f7
   - name: lint
-    image: node:20.12.2
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     commands:
       - npm ci
       - npm run lint
   - name: audit
-    image: node:20.12.2
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     commands:
       - npm install -g better-npm-audit
       - better-npm-audit audit --production --level=moderate
   - name: docker-dry-run
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend
@@ -50,7 +50,7 @@ depends_on:
 
 steps:
   - name: docker-publish
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend
@@ -77,7 +77,7 @@ depends_on:
 
 steps:
   - name: deploy-dev
-    image: appleboy/drone-ssh:1.7.5
+    image: appleboy/drone-ssh:1.7.5@sha256:995677e073454912f26d4c0fdd2f9df2e1f5a30d6603d3f2ece667311b6babb3
     settings:
       host:
         - dev01.wtf-eg.net
@@ -99,14 +99,14 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse:3.0.2-debian
+    image: fsfe/reuse:3.0.2-debian@sha256:a0dca4eb014908af80608c06de3470b770a9c97f91041777d0c1cfbfeb8709f7
   - name: lint
-    image: node:20.12.2
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     commands:
       - npm ci
       - npm run lint
   - name: docker-publish
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend

Dockerfile

@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM node:20.12.2-alpine as builder
+FROM node:20.12.2-alpine@sha256:7a91aa397f2e2dfbfcdad2e2d72599f374e0b0172be1d86eeb73f1d33f36a4b2 as builder
 
 COPY package.json package-lock.json ./
 RUN npm install
@@ -15,7 +15,7 @@ COPY src src
 RUN npm ci && npm run build
 
 
-FROM nginx:1.24-alpine as ki-frontend
+FROM nginx:1.24-alpine@sha256:77e5d4a6ad906c5d3793764085706577fa705b1dc6f244ea0241c4b5e2155385 as ki-frontend
 
 LABEL org.opencontainers.image.source=https://git.wtf-eg.de/kompetenzinventar/ki-frontend.git
 LABEL org.opencontainers.image.url=https://git.wtf-eg.de/kompetenzinventar/ki-frontend

package-lock.json

@@ -9,22 +9,22 @@
       "version": "1.1.0",
       "devDependencies": {
         "@babel/eslint-parser": "7.23.10",
-        "@vue/cli-plugin-babel": "~5.0.8",
+        "@vue/cli-plugin-babel": "5.0.8",
-        "@vue/cli-plugin-eslint": "~5.0.8",
+        "@vue/cli-plugin-eslint": "5.0.8",
-        "@vue/cli-plugin-router": "~5.0.8",
+        "@vue/cli-plugin-router": "5.0.8",
-        "@vue/cli-service": "~5.0.8",
+        "@vue/cli-service": "5.0.8",
-        "@vue/compiler-sfc": "^3.4.19",
+        "@vue/compiler-sfc": "3.4.38",
-        "bootstrap": "^5.3.3",
+        "bootstrap": "5.3.3",
-        "bootstrap-icons": "^1.11.3",
+        "bootstrap-icons": "1.11.3",
-        "core-js": "^3.38.1",
+        "core-js": "3.38.1",
         "eslint": "^7.32.0",
         "eslint-plugin-vue": "^9.27.0",
-        "sass": "^1.77.8",
+        "sass": "1.77.8",
-        "sass-loader": "^14.2.1",
+        "sass-loader": "14.2.1",
-        "v-tooltip": "^4.0.0-beta.17",
+        "v-tooltip": "4.0.0-beta.17",
-        "vue": "^3.4.0",
+        "vue": "3.4.38",
-        "vue-router": "^4.4.3",
+        "vue-router": "4.4.3",
-        "vuex": "^4.1.0"
+        "vuex": "4.1.0"
       }
     },
     "node_modules/@achrinza/node-ipc": {
@@ -2709,6 +2709,7 @@
       "resolved": "https://registry.npmjs.org/@vue/cli-plugin-babel/-/cli-plugin-babel-5.0.8.tgz",
       "integrity": "sha512-a4qqkml3FAJ3auqB2kN2EMPocb/iu0ykeELwed+9B1c1nQ1HKgslKMHMPavYx3Cd/QAx2mBD4hwKBqZXEI/CsQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@babel/core": "^7.12.16",
         "@vue/babel-preset-app": "^5.0.8",
@@ -2726,6 +2727,7 @@
       "resolved": "https://registry.npmjs.org/@vue/cli-plugin-eslint/-/cli-plugin-eslint-5.0.8.tgz",
       "integrity": "sha512-d11+I5ONYaAPW1KyZj9GlrV/E6HZePq5L5eAF5GgoVdu6sxr6bDgEoxzhcS1Pk2eh8rn1MxG/FyyR+eCBj/CNg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@vue/cli-shared-utils": "^5.0.8",
         "eslint-webpack-plugin": "^3.1.0",
@@ -2743,6 +2745,7 @@
       "resolved": "https://registry.npmjs.org/@vue/cli-plugin-router/-/cli-plugin-router-5.0.8.tgz",
       "integrity": "sha512-Gmv4dsGdAsWPqVijz3Ux2OS2HkMrWi1ENj2cYL75nUeL+Xj5HEstSqdtfZ0b1q9NCce+BFB6QnHfTBXc/fCvMg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@vue/cli-shared-utils": "^5.0.8"
       },
@@ -2764,6 +2767,7 @@
       "resolved": "https://registry.npmjs.org/@vue/cli-service/-/cli-service-5.0.8.tgz",
       "integrity": "sha512-nV7tYQLe7YsTtzFrfOMIHc5N2hp5lHG2rpYr0aNja9rNljdgcPZLyQRb2YRivTHqTv7lI962UXFURcpStHgyFw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@babel/helper-compilation-targets": "^7.12.16",
         "@soda/friendly-errors-webpack-plugin": "^1.8.0",
@@ -3006,6 +3010,7 @@
       "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.4.38.tgz",
       "integrity": "sha512-s5QfZ+9PzPh3T5H4hsQDJtI8x7zdJaew/dCGgqZ2630XdzaZ3AD8xGZfBqpT8oaD/p2eedd+pL8tD5vvt5ZYJQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@babel/parser": "^7.24.7",
         "@vue/compiler-core": "3.4.38",
@@ -3883,6 +3888,7 @@
           "url": "https://opencollective.com/bootstrap"
         }
       ],
+      "license": "MIT",
       "peerDependencies": {
         "@popperjs/core": "^2.11.8"
       }
@@ -3901,7 +3907,8 @@
           "type": "opencollective",
           "url": "https://opencollective.com/bootstrap"
         }
-      ]
+      ],
+      "license": "MIT"
     },
     "node_modules/brace-expansion": {
       "version": "1.1.11",
@@ -4538,6 +4545,7 @@
       "integrity": "sha512-OP35aUorbU3Zvlx7pjsFdu1rGNnD4pgw/CWoYzRY3t2EzoVT7shKHY1dlAy3f41cGIO7ZDPQimhGFTlEYkG/Hw==",
       "dev": true,
       "hasInstallScript": true,
+      "license": "MIT",
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/core-js"
@@ -9760,6 +9768,7 @@
       "resolved": "https://registry.npmjs.org/sass/-/sass-1.77.8.tgz",
       "integrity": "sha512-4UHg6prsrycW20fqLGPShtEvo/WyHRVRHwOP4DzkUrObWoWI05QBSfzU71TVB7PFaL104TwNaHpjlWXAZbQiNQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "chokidar": ">=3.0.0 <4.0.0",
         "immutable": "^4.0.0",
@@ -9777,6 +9786,7 @@
       "resolved": "https://registry.npmjs.org/sass-loader/-/sass-loader-14.2.1.tgz",
       "integrity": "sha512-G0VcnMYU18a4N7VoNDegg2OuMjYtxnqzQWARVWCIVSZwJeiL9kg8QMsuIZOplsJgTzZLF6jGxI3AClj8I9nRdQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "neo-async": "^2.6.2"
       },
@@ -10892,6 +10902,7 @@
       "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-4.0.0-beta.17.tgz",
       "integrity": "sha512-d7v/6KEXQOtcj3NT3Z1LpbDv8SBh8JgbsD+3s/zGIGCxiXC2SoVW6wGV4X0MlCo97PiosibcSe+VKbFiy4AKnQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@popperjs/core": "^2.11.0",
         "vue-resize": "^2.0.0-alpha.1"
@@ -10930,6 +10941,7 @@
       "resolved": "https://registry.npmjs.org/vue/-/vue-3.4.38.tgz",
       "integrity": "sha512-f0ZgN+mZ5KFgVv9wz0f4OgVKukoXtS3nwET4c2vLBGQR50aI8G0cqbFtLlX9Yiyg3LFGBitruPHt2PxwTduJEw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@vue/compiler-dom": "3.4.38",
         "@vue/compiler-sfc": "3.4.38",
@@ -11148,6 +11160,7 @@
       "resolved": "https://registry.npmjs.org/vue-router/-/vue-router-4.4.3.tgz",
       "integrity": "sha512-sv6wmNKx2j3aqJQDMxLFzs/u/mjA9Z5LCgy6BE0f7yFWMjrPLnS/sPNn8ARY/FXw6byV18EFutn5lTO6+UsV5A==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@vue/devtools-api": "^6.6.3"
       },
@@ -11185,6 +11198,7 @@
       "resolved": "https://registry.npmjs.org/vuex/-/vuex-4.1.0.tgz",
       "integrity": "sha512-hmV6UerDrPcgbSy9ORAtNXDr9M4wlNP4pEFKye4ujJF8oqgFFuxDCdOLS3eNoRTtq5O3hoBDh9Doj1bQMYHRbQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@vue/devtools-api": "^6.0.0-beta.11"
       },

package.json

@@ -8,21 +8,21 @@
   },
   "devDependencies": {
     "@babel/eslint-parser": "7.23.10",
-    "@vue/cli-plugin-babel": "~5.0.8",
+    "@vue/cli-plugin-babel": "5.0.8",
-    "@vue/cli-plugin-eslint": "~5.0.8",
+    "@vue/cli-plugin-eslint": "5.0.8",
-    "@vue/cli-plugin-router": "~5.0.8",
+    "@vue/cli-plugin-router": "5.0.8",
-    "@vue/cli-service": "~5.0.8",
+    "@vue/cli-service": "5.0.8",
-    "@vue/compiler-sfc": "^3.4.19",
+    "@vue/compiler-sfc": "3.4.38",
-    "bootstrap": "^5.3.3",
+    "bootstrap": "5.3.3",
-    "bootstrap-icons": "^1.11.3",
+    "bootstrap-icons": "1.11.3",
-    "core-js": "^3.38.1",
+    "core-js": "3.38.1",
     "eslint": "^7.32.0",
     "eslint-plugin-vue": "^9.27.0",
-    "sass": "^1.77.8",
+    "sass": "1.77.8",
-    "sass-loader": "^14.2.1",
+    "sass-loader": "14.2.1",
-    "v-tooltip": "^4.0.0-beta.17",
+    "v-tooltip": "4.0.0-beta.17",
-    "vue": "^3.4.0",
+    "vue": "3.4.38",
-    "vue-router": "^4.4.3",
+    "vue-router": "4.4.3",
-    "vuex": "^4.1.0"
+    "vuex": "4.1.0"
   }
 }