From 775cf303d16d9531ab39907678d661e759dc0435 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 22 Aug 2024 09:36:14 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .drone.yml | 18 +++++++++--------- Dockerfile | 4 ++-- package-lock.json | 44 +++++++++++++++++++++++++++++--------------- package.json | 28 ++++++++++++++-------------- 4 files changed, 54 insertions(+), 40 deletions(-) diff --git a/.drone.yml b/.drone.yml index 58a87eb..986c3e1 100644 --- a/.drone.yml +++ b/.drone.yml @@ -15,19 +15,19 @@ trigger: steps: - name: reuse - image: fsfe/reuse:3.0.2-debian + image: fsfe/reuse:3.0.2-debian@sha256:a0dca4eb014908af80608c06de3470b770a9c97f91041777d0c1cfbfeb8709f7 - name: lint - image: node:20.12.2 + image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9 commands: - npm ci - npm run lint - name: audit - image: node:20.12.2 + image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9 commands: - npm install -g better-npm-audit - better-npm-audit audit --production --level=moderate - name: docker-dry-run - image: plugins/docker:20.17.3 + image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c settings: registry: git.wtf-eg.de repo: git.wtf-eg.de/kompetenzinventar/frontend @@ -50,7 +50,7 @@ depends_on: steps: - name: docker-publish - image: plugins/docker:20.17.3 + image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c settings: registry: git.wtf-eg.de repo: git.wtf-eg.de/kompetenzinventar/frontend @@ -77,7 +77,7 @@ depends_on: steps: - name: deploy-dev - image: appleboy/drone-ssh:1.7.5 + image: appleboy/drone-ssh:1.7.5@sha256:995677e073454912f26d4c0fdd2f9df2e1f5a30d6603d3f2ece667311b6babb3 settings: host: - dev01.wtf-eg.net @@ -99,14 +99,14 @@ trigger: steps: - name: reuse - image: fsfe/reuse:3.0.2-debian + image: fsfe/reuse:3.0.2-debian@sha256:a0dca4eb014908af80608c06de3470b770a9c97f91041777d0c1cfbfeb8709f7 - name: lint - image: node:20.12.2 + image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9 commands: - npm ci - npm run lint - name: docker-publish - image: plugins/docker:20.17.3 + image: plugins/docker:20.17.3@sha256:7cb19d23e35e1603ae437cc41cc064c95a997a8776d63a555990967668ea7c5c settings: registry: git.wtf-eg.de repo: git.wtf-eg.de/kompetenzinventar/frontend diff --git a/Dockerfile b/Dockerfile index 0bfc627..876094c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,7 +2,7 @@ # # SPDX-License-Identifier: AGPL-3.0-or-later -FROM node:20.12.2-alpine as builder +FROM node:20.12.2-alpine@sha256:7a91aa397f2e2dfbfcdad2e2d72599f374e0b0172be1d86eeb73f1d33f36a4b2 as builder COPY package.json package-lock.json ./ RUN npm install @@ -15,7 +15,7 @@ COPY src src RUN npm ci && npm run build -FROM nginx:1.24-alpine as ki-frontend +FROM nginx:1.24-alpine@sha256:77e5d4a6ad906c5d3793764085706577fa705b1dc6f244ea0241c4b5e2155385 as ki-frontend LABEL org.opencontainers.image.source=https://git.wtf-eg.de/kompetenzinventar/ki-frontend.git LABEL org.opencontainers.image.url=https://git.wtf-eg.de/kompetenzinventar/ki-frontend diff --git a/package-lock.json b/package-lock.json index 62d2ae2..45472d5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,22 +9,22 @@ "version": "1.1.0", "devDependencies": { "@babel/eslint-parser": "7.23.10", - "@vue/cli-plugin-babel": "~5.0.8", - "@vue/cli-plugin-eslint": "~5.0.8", - "@vue/cli-plugin-router": "~5.0.8", - "@vue/cli-service": "~5.0.8", - "@vue/compiler-sfc": "^3.4.19", - "bootstrap": "^5.3.3", - "bootstrap-icons": "^1.11.3", - "core-js": "^3.38.1", + "@vue/cli-plugin-babel": "5.0.8", + "@vue/cli-plugin-eslint": "5.0.8", + "@vue/cli-plugin-router": "5.0.8", + "@vue/cli-service": "5.0.8", + "@vue/compiler-sfc": "3.4.38", + "bootstrap": "5.3.3", + "bootstrap-icons": "1.11.3", + "core-js": "3.38.1", "eslint": "^7.32.0", "eslint-plugin-vue": "^9.27.0", - "sass": "^1.77.8", - "sass-loader": "^14.2.1", - "v-tooltip": "^4.0.0-beta.17", - "vue": "^3.4.0", - "vue-router": "^4.4.3", - "vuex": "^4.1.0" + "sass": "1.77.8", + "sass-loader": "14.2.1", + "v-tooltip": "4.0.0-beta.17", + "vue": "3.4.38", + "vue-router": "4.4.3", + "vuex": "4.1.0" } }, "node_modules/@achrinza/node-ipc": { @@ -2709,6 +2709,7 @@ "resolved": "https://registry.npmjs.org/@vue/cli-plugin-babel/-/cli-plugin-babel-5.0.8.tgz", "integrity": "sha512-a4qqkml3FAJ3auqB2kN2EMPocb/iu0ykeELwed+9B1c1nQ1HKgslKMHMPavYx3Cd/QAx2mBD4hwKBqZXEI/CsQ==", "dev": true, + "license": "MIT", "dependencies": { "@babel/core": "^7.12.16", "@vue/babel-preset-app": "^5.0.8", @@ -2726,6 +2727,7 @@ "resolved": "https://registry.npmjs.org/@vue/cli-plugin-eslint/-/cli-plugin-eslint-5.0.8.tgz", "integrity": "sha512-d11+I5ONYaAPW1KyZj9GlrV/E6HZePq5L5eAF5GgoVdu6sxr6bDgEoxzhcS1Pk2eh8rn1MxG/FyyR+eCBj/CNg==", "dev": true, + "license": "MIT", "dependencies": { "@vue/cli-shared-utils": "^5.0.8", "eslint-webpack-plugin": "^3.1.0", @@ -2743,6 +2745,7 @@ "resolved": "https://registry.npmjs.org/@vue/cli-plugin-router/-/cli-plugin-router-5.0.8.tgz", "integrity": "sha512-Gmv4dsGdAsWPqVijz3Ux2OS2HkMrWi1ENj2cYL75nUeL+Xj5HEstSqdtfZ0b1q9NCce+BFB6QnHfTBXc/fCvMg==", "dev": true, + "license": "MIT", "dependencies": { "@vue/cli-shared-utils": "^5.0.8" }, @@ -2764,6 +2767,7 @@ "resolved": "https://registry.npmjs.org/@vue/cli-service/-/cli-service-5.0.8.tgz", "integrity": "sha512-nV7tYQLe7YsTtzFrfOMIHc5N2hp5lHG2rpYr0aNja9rNljdgcPZLyQRb2YRivTHqTv7lI962UXFURcpStHgyFw==", "dev": true, + "license": "MIT", "dependencies": { "@babel/helper-compilation-targets": "^7.12.16", "@soda/friendly-errors-webpack-plugin": "^1.8.0", @@ -3006,6 +3010,7 @@ "resolved": "https://registry.npmjs.org/@vue/compiler-sfc/-/compiler-sfc-3.4.38.tgz", "integrity": "sha512-s5QfZ+9PzPh3T5H4hsQDJtI8x7zdJaew/dCGgqZ2630XdzaZ3AD8xGZfBqpT8oaD/p2eedd+pL8tD5vvt5ZYJQ==", "dev": true, + "license": "MIT", "dependencies": { "@babel/parser": "^7.24.7", "@vue/compiler-core": "3.4.38", @@ -3883,6 +3888,7 @@ "url": "https://opencollective.com/bootstrap" } ], + "license": "MIT", "peerDependencies": { "@popperjs/core": "^2.11.8" } @@ -3901,7 +3907,8 @@ "type": "opencollective", "url": "https://opencollective.com/bootstrap" } - ] + ], + "license": "MIT" }, "node_modules/brace-expansion": { "version": "1.1.11", @@ -4538,6 +4545,7 @@ "integrity": "sha512-OP35aUorbU3Zvlx7pjsFdu1rGNnD4pgw/CWoYzRY3t2EzoVT7shKHY1dlAy3f41cGIO7ZDPQimhGFTlEYkG/Hw==", "dev": true, "hasInstallScript": true, + "license": "MIT", "funding": { "type": "opencollective", "url": "https://opencollective.com/core-js" @@ -9760,6 +9768,7 @@ "resolved": "https://registry.npmjs.org/sass/-/sass-1.77.8.tgz", "integrity": "sha512-4UHg6prsrycW20fqLGPShtEvo/WyHRVRHwOP4DzkUrObWoWI05QBSfzU71TVB7PFaL104TwNaHpjlWXAZbQiNQ==", "dev": true, + "license": "MIT", "dependencies": { "chokidar": ">=3.0.0 <4.0.0", "immutable": "^4.0.0", @@ -9777,6 +9786,7 @@ "resolved": "https://registry.npmjs.org/sass-loader/-/sass-loader-14.2.1.tgz", "integrity": "sha512-G0VcnMYU18a4N7VoNDegg2OuMjYtxnqzQWARVWCIVSZwJeiL9kg8QMsuIZOplsJgTzZLF6jGxI3AClj8I9nRdQ==", "dev": true, + "license": "MIT", "dependencies": { "neo-async": "^2.6.2" }, @@ -10892,6 +10902,7 @@ "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-4.0.0-beta.17.tgz", "integrity": "sha512-d7v/6KEXQOtcj3NT3Z1LpbDv8SBh8JgbsD+3s/zGIGCxiXC2SoVW6wGV4X0MlCo97PiosibcSe+VKbFiy4AKnQ==", "dev": true, + "license": "MIT", "dependencies": { "@popperjs/core": "^2.11.0", "vue-resize": "^2.0.0-alpha.1" @@ -10930,6 +10941,7 @@ "resolved": "https://registry.npmjs.org/vue/-/vue-3.4.38.tgz", "integrity": "sha512-f0ZgN+mZ5KFgVv9wz0f4OgVKukoXtS3nwET4c2vLBGQR50aI8G0cqbFtLlX9Yiyg3LFGBitruPHt2PxwTduJEw==", "dev": true, + "license": "MIT", "dependencies": { "@vue/compiler-dom": "3.4.38", "@vue/compiler-sfc": "3.4.38", @@ -11148,6 +11160,7 @@ "resolved": "https://registry.npmjs.org/vue-router/-/vue-router-4.4.3.tgz", "integrity": "sha512-sv6wmNKx2j3aqJQDMxLFzs/u/mjA9Z5LCgy6BE0f7yFWMjrPLnS/sPNn8ARY/FXw6byV18EFutn5lTO6+UsV5A==", "dev": true, + "license": "MIT", "dependencies": { "@vue/devtools-api": "^6.6.3" }, @@ -11185,6 +11198,7 @@ "resolved": "https://registry.npmjs.org/vuex/-/vuex-4.1.0.tgz", "integrity": "sha512-hmV6UerDrPcgbSy9ORAtNXDr9M4wlNP4pEFKye4ujJF8oqgFFuxDCdOLS3eNoRTtq5O3hoBDh9Doj1bQMYHRbQ==", "dev": true, + "license": "MIT", "dependencies": { "@vue/devtools-api": "^6.0.0-beta.11" }, diff --git a/package.json b/package.json index a01cfc2..2f35aa5 100644 --- a/package.json +++ b/package.json @@ -8,21 +8,21 @@ }, "devDependencies": { "@babel/eslint-parser": "7.23.10", - "@vue/cli-plugin-babel": "~5.0.8", - "@vue/cli-plugin-eslint": "~5.0.8", - "@vue/cli-plugin-router": "~5.0.8", - "@vue/cli-service": "~5.0.8", - "@vue/compiler-sfc": "^3.4.19", - "bootstrap": "^5.3.3", - "bootstrap-icons": "^1.11.3", - "core-js": "^3.38.1", + "@vue/cli-plugin-babel": "5.0.8", + "@vue/cli-plugin-eslint": "5.0.8", + "@vue/cli-plugin-router": "5.0.8", + "@vue/cli-service": "5.0.8", + "@vue/compiler-sfc": "3.4.38", + "bootstrap": "5.3.3", + "bootstrap-icons": "1.11.3", + "core-js": "3.38.1", "eslint": "^7.32.0", "eslint-plugin-vue": "^9.27.0", - "sass": "^1.77.8", - "sass-loader": "^14.2.1", - "v-tooltip": "^4.0.0-beta.17", - "vue": "^3.4.0", - "vue-router": "^4.4.3", - "vuex": "^4.1.0" + "sass": "1.77.8", + "sass-loader": "14.2.1", + "v-tooltip": "4.0.0-beta.17", + "vue": "3.4.38", + "vue-router": "4.4.3", + "vuex": "4.1.0" } }