chore(deps): pin dependencies (#35)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@antora/lunr-extension](https://antora.org) ([source](https://gitlab.com/antora/antora-lunr-extension)) | devDependencies | pin | [`^1.0.0-alpha.8` -> `1.0.0-alpha.8`](https://renovatebot.com/diffs/npm/@antora%2flunr-extension/1.0.0-alpha.8/1.0.0-alpha.8) | | [@asciidoctor/core](https://github.com/asciidoctor/asciidoctor.js) | devDependencies | pin | [`~2.2` -> `2.2.6`](https://renovatebot.com/diffs/npm/@asciidoctor%2fcore/2.2.6/2.2.6) | | [@commitlint/config-conventional](https://commitlint.js.org/) ([source](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional)) | devDependencies | pin | [`^18.1.0` -> `18.1.0`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/18.1.0/18.1.0) | | [@fontsource/roboto](https://fontsource.org/fonts/roboto) ([source](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/roboto)) | devDependencies | pin | [`~4.5` -> `4.5.8`](https://renovatebot.com/diffs/npm/@fontsource%2froboto/4.5.8/4.5.8) | | [@fontsource/roboto-mono](https://fontsource.org/fonts/roboto-mono) ([source](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/roboto-mono)) | devDependencies | pin | [`~4.5` -> `4.5.10`](https://renovatebot.com/diffs/npm/@fontsource%2froboto-mono/4.5.10/4.5.10) | | [@remix-run/dev](https://remix.run) ([source](https://github.com/remix-run/remix/tree/HEAD/packages/remix-dev)) | devDependencies | pin | [`^2.2.0` -> `2.2.0`](https://renovatebot.com/diffs/npm/@remix-run%2fdev/2.2.0/2.2.0) | | [@remix-run/eslint-config](https://github.com/remix-run/remix) ([source](https://github.com/remix-run/remix/tree/HEAD/packages/remix-eslint-config)) | devDependencies | pin | [`^2.2.0` -> `2.2.0`](https://renovatebot.com/diffs/npm/@remix-run%2feslint-config/2.2.0/2.2.0) | | alpine | | pinDigest | -> `c5b1261` | | alpine/crane | | pinDigest | -> `9955edb` | | [asciidoctor-kroki](https://github.com/Mogztter/asciidoctor-kroki) | devDependencies | pin | [`^0.18.0` -> `0.18.1`](https://renovatebot.com/diffs/npm/asciidoctor-kroki/0.18.1/0.18.1) | | [autoprefixer](https://github.com/postcss/autoprefixer) | devDependencies | pin | [`~9.8.0` -> `9.8.8`](https://renovatebot.com/diffs/npm/autoprefixer/9.8.8/9.8.8) | | bitnami/git | | pinDigest | -> `3932583` | | [browser-pack-flat](https://github.com/goto-bus-stop/browser-pack-flat) | devDependencies | pin | [`~3.5.0` -> `3.5.0`](https://renovatebot.com/diffs/npm/browser-pack-flat/3.5.0/3.5.0) | | [browserify](https://github.com/browserify/browserify) | devDependencies | pin | [`~16.5` -> `16.5.2`](https://renovatebot.com/diffs/npm/browserify/16.5.2/16.5.2) | | cl00e9ment/node.js-builder | | pinDigest | -> `c3f6622` | | codeberg.org/forgejo/forgejo | | pinDigest | -> `c2e782f` | | [cssnano](https://github.com/cssnano/cssnano) | devDependencies | pin | [`~4.1` -> `4.1.11`](https://renovatebot.com/diffs/npm/cssnano/4.1.11/4.1.11) | | [eslint](https://eslint.org) ([source](https://github.com/eslint/eslint)) | devDependencies | pin | [`^8.38.0` -> `8.52.0`](https://renovatebot.com/diffs/npm/eslint/8.52.0/8.52.0) | | [eslint](https://eslint.org) ([source](https://github.com/eslint/eslint)) | devDependencies | pin | [`~6.8` -> `6.8.0`](https://renovatebot.com/diffs/npm/eslint/6.8.0/6.8.0) | | [eslint-config-standard](https://github.com/standard/eslint-config-standard) | devDependencies | pin | [`~14.1` -> `14.1.1`](https://renovatebot.com/diffs/npm/eslint-config-standard/14.1.1/14.1.1) | | [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | devDependencies | pin | [`~2.20` -> `2.20.2`](https://renovatebot.com/diffs/npm/eslint-plugin-import/2.20.2/2.20.2) | | [eslint-plugin-node](https://github.com/mysticatea/eslint-plugin-node) | devDependencies | pin | [`~11.1` -> `11.1.0`](https://renovatebot.com/diffs/npm/eslint-plugin-node/11.1.0/11.1.0) | | [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) | devDependencies | pin | [`~4.2` -> `4.2.1`](https://renovatebot.com/diffs/npm/eslint-plugin-promise/4.2.1/4.2.1) | | [eslint-plugin-standard](https://github.com/standard/eslint-plugin-standard) | devDependencies | pin | [`~4.0` -> `4.0.2`](https://renovatebot.com/diffs/npm/eslint-plugin-standard/4.0.2/4.0.2) | | [fancy-log](https://github.com/gulpjs/fancy-log) | devDependencies | pin | [`~1.3` -> `1.3.3`](https://renovatebot.com/diffs/npm/fancy-log/1.3.3/1.3.3) | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | devDependencies | pin | [`~8.1` -> `8.1.0`](https://renovatebot.com/diffs/npm/fs-extra/8.1.0/8.1.0) | | [gcr.io/kaniko-project/executor](https://github.com/GoogleContainerTools/kaniko) | | pinDigest | -> `6976d73` | | ghcr.io/dzikoysk/reposilite | | pinDigest | -> `c123c70` | | ghcr.io/gitleaks/gitleaks | | pinDigest | -> `6945c62` | | ghcr.io/hadolint/hadolint | | pinDigest | -> `9cef74a` | | gradle | | pinDigest | -> `c216f35` | | [gulp](https://gulpjs.com) ([source](https://github.com/gulpjs/gulp)) | devDependencies | pin | [`~4.0` -> `4.0.2`](https://renovatebot.com/diffs/npm/gulp/4.0.2/4.0.2) | | [gulp-cli](https://gulpjs.com) ([source](https://github.com/gulpjs/gulp-cli)) | devDependencies | pin | [`^2.3.0` -> `2.3.0`](https://renovatebot.com/diffs/npm/gulp-cli/2.3.0/2.3.0) | | [gulp-concat](https://github.com/contra/gulp-concat) | devDependencies | pin | [`~2.6` -> `2.6.1`](https://renovatebot.com/diffs/npm/gulp-concat/2.6.1/2.6.1) | | [gulp-connect](https://github.com/avevlad/gulp-connect) | devDependencies | pin | [`~5.7` -> `5.7.0`](https://renovatebot.com/diffs/npm/gulp-connect/5.7.0/5.7.0) | | [gulp-eslint](https://github.com/adametry/gulp-eslint) | devDependencies | pin | [`~6.0` -> `6.0.0`](https://renovatebot.com/diffs/npm/gulp-eslint/6.0.0/6.0.0) | | [gulp-imagemin](https://github.com/sindresorhus/gulp-imagemin) | devDependencies | pin | [`~6.2` -> `6.2.0`](https://renovatebot.com/diffs/npm/gulp-imagemin/6.2.0/6.2.0) | | [gulp-postcss](https://github.com/postcss/gulp-postcss) | devDependencies | pin | [`~8.0` -> `8.0.0`](https://renovatebot.com/diffs/npm/gulp-postcss/8.0.0/8.0.0) | | [gulp-stylelint](https://github.com/olegskl/gulp-stylelint) | devDependencies | pin | [`~13.0` -> `13.0.0`](https://renovatebot.com/diffs/npm/gulp-stylelint/13.0.0/13.0.0) | | [gulp-uglify](https://github.com/terinjokes/gulp-uglify) | devDependencies | pin | [`~3.0` -> `3.0.2`](https://renovatebot.com/diffs/npm/gulp-uglify/3.0.2/3.0.2) | | [gulp-vinyl-zip](https://github.com/joaomoreno/gulp-vinyl-zip) | devDependencies | pin | [`~2.2` -> `2.2.1`](https://renovatebot.com/diffs/npm/gulp-vinyl-zip/2.2.1/2.2.1) | | [handlebars](https://www.handlebarsjs.com/) ([source](https://github.com/handlebars-lang/handlebars.js)) | devDependencies | pin | [`~4.7` -> `4.7.8`](https://renovatebot.com/diffs/npm/handlebars/4.7.8/4.7.8) | | [http-server](https://github.com/http-party/http-server) | devDependencies | pin | [`^14.1.1` -> `14.1.1`](https://renovatebot.com/diffs/npm/http-server/14.1.1/14.1.1) | | joxit/docker-registry-ui | | pinDigest | -> `ccb4b40` | | [js-yaml](https://github.com/nodeca/js-yaml) | devDependencies | pin | [`~3.13` -> `3.13.1`](https://renovatebot.com/diffs/npm/js-yaml/3.13.1/3.13.1) | | [linkinator](https://github.com/JustinBeckwith/linkinator) | devDependencies | pin | [`^6.0.0` -> `6.0.4`](https://renovatebot.com/diffs/npm/linkinator/6.0.4/6.0.4) | | maildev/maildev | | pinDigest | -> `f742922` | | [merge-stream](https://github.com/grncdr/merge-stream) | devDependencies | pin | [`~2.0` -> `2.0.0`](https://renovatebot.com/diffs/npm/merge-stream/2.0.0/2.0.0) | | nginx | final | pinDigest | -> `bb193a0` | | [postcss-calc](https://github.com/postcss/postcss-calc) | devDependencies | pin | [`~7.0` -> `7.0.5`](https://renovatebot.com/diffs/npm/postcss-calc/7.0.5/7.0.5) | | [postcss-custom-properties](https://github.com/csstools/postcss-plugins/tree/main/plugins/postcss-custom-properties#readme) ([source](https://github.com/csstools/postcss-plugins/tree/HEAD/plugins/postcss-custom-properties)) | devDependencies | pin | [`~9.1` -> `9.1.1`](https://renovatebot.com/diffs/npm/postcss-custom-properties/9.1.1/9.1.1) | | [postcss-import](https://github.com/postcss/postcss-import) | devDependencies | pin | [`~12.0` -> `12.0.1`](https://renovatebot.com/diffs/npm/postcss-import/12.0.1/12.0.1) | | [postcss-url](https://github.com/postcss/postcss-url) | devDependencies | pin | [`~8.0` -> `8.0.0`](https://renovatebot.com/diffs/npm/postcss-url/8.0.0/8.0.0) | | postgres | | pinDigest | -> `49c276f` | | [prettier-eslint](https://github.com/prettier/prettier-eslint) | devDependencies | pin | [`~9.0` -> `9.0.2`](https://renovatebot.com/diffs/npm/prettier-eslint/9.0.2/9.0.2) | | python | | pinDigest | -> `2d5f7c8` | | [registry](https://github.com/distribution/distribution) | | pinDigest | -> `f4e1b87` | | [require-directory](https://github.com/troygoode/node-require-directory) | devDependencies | pin | [`~2.1` -> `2.1.1`](https://renovatebot.com/diffs/npm/require-directory/2.1.1/2.1.1) | | [require-from-string](https://github.com/floatdrop/require-from-string) | devDependencies | pin | [`~2.0` -> `2.0.2`](https://renovatebot.com/diffs/npm/require-from-string/2.0.2/2.0.2) | | sonarqube | final | pinDigest | -> `6238f13` | | [stylelint](https://stylelint.io) ([source](https://github.com/stylelint/stylelint)) | devDependencies | pin | [`~13.3` -> `13.3.3`](https://renovatebot.com/diffs/npm/stylelint/13.3.3/13.3.3) | | [stylelint-config-standard](https://github.com/stylelint/stylelint-config-standard) | devDependencies | pin | [`~20.0` -> `20.0.0`](https://renovatebot.com/diffs/npm/stylelint-config-standard/20.0.0/20.0.0) | | [traefik](https://github.com/containous/traefik) | | pinDigest | -> `6341b98` | | [typescript](https://www.typescriptlang.org/) ([source](https://github.com/Microsoft/TypeScript)) | devDependencies | pin | [`^5.1.6` -> `5.2.2`](https://renovatebot.com/diffs/npm/typescript/5.2.2/5.2.2) | | [verdaccio/verdaccio](https://github.com/verdaccio/verdaccio) | | pinDigest | -> `c02b4c1` | | [vinyl-fs](https://github.com/gulpjs/vinyl-fs) | devDependencies | pin | [`~3.0` -> `3.0.3`](https://renovatebot.com/diffs/npm/vinyl-fs/3.0.3/3.0.3) | | woodpeckerci/plugin-git | | pinDigest | -> `7af90de` | | [woodpeckerci/woodpecker-agent](https://github.com/woodpecker-ci/woodpecker) | | pinDigest | -> `26744e5` | | [woodpeckerci/woodpecker-server](https://github.com/woodpecker-ci/woodpecker) | | pinDigest | -> `4717456` | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: Richard Attermeyer <richard.attermeyer@gmail.com> Reviewed-on: #35 Co-authored-by: Renovate Bot <renovatebot@demo.rattermeyer.de> Co-committed-by: Renovate Bot <renovatebot@demo.rattermeyer.de>
2024-01-29 13:07:59 +00:00 · 2024-01-29 13:07:59 +00:00 · 048be30d44
parent 9edc67ef20
commit 048be30d44
20 changed files with 327 additions and 332 deletions
--- a/.woodpecker/.backend.yml
+++ b/.woodpecker/.backend.yml
@ -1,19 +1,19 @@
 ---
 variables:
-  - &java_image "gradle:8.5.0-jdk17"
+  - &java_image "gradle:8.5.0-jdk17@sha256:c216f357d9e4fb3b43f318665d166e05fe9ba8dea4f962c6346a1b4d197e80e7"
 when:
  path: "app/**"
  event: [push, tag]
 clone:
  git:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
    settings:
      skip_verify: true
      partial: false
      tags: true
 steps:
  "prepare:version":
-    image: bitnami/git:2.43.0
+    image: bitnami/git:2.43.0@sha256:3932583adf73c9e7e75232c0a3637fb0ff7833d7a81c858e74468df0dbd89cf1
    commands:
      - . ./version.sh
  "lint:style":
@ -22,7 +22,7 @@ steps:
      - gradle --no-daemon spotlessCheck
    depends_on: ["prepare:version"]
  "lint:dockerfile":
-    image: ghcr.io/hadolint/hadolint:latest-debian
+    image: ghcr.io/hadolint/hadolint:latest-debian@sha256:9cef74a390694cdc01dd119cbba9adac5bb6671ce67d8d79eb7ec68f497a3684
    commands:
      - hadolint --version
    depends_on: ["prepare:version"]
@ -42,7 +42,7 @@ steps:

  "deploy:backend":
    depends_on: ["analyze:sbom"]
-    image: alpine:latest
+    image: alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
    commands:
      - echo "deploy backend"
      - env
--- a/.woodpecker/.documentation.yml
+++ b/.woodpecker/.documentation.yml
@ -3,10 +3,10 @@ when:
  path: "documentation/**"
  event: [push, tag]
 variables:
-  - &frontend_image "cl00e9ment/node.js-builder:git"
+  - &frontend_image "cl00e9ment/node.js-builder:git@sha256:c3f6622a282e81536fa07c0218dfc35aa4141076679d9ea73839ae0032bd57cb"
 clone:
  git:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
    partial: false
    settings:
      skip_verify: true
@ -29,7 +29,7 @@ steps:
      - pnpm antora generate --stacktrace antora-playbook.yml
    directory: documentation
  "assemble:documentation":
-    image: gcr.io/kaniko-project/executor:v1.20.0-debug
+    image: gcr.io/kaniko-project/executor:v1.20.0-debug@sha256:6976d731d1fc2a4e89986d833c1538946bd36b43e21fb1d0db38fe9499adc49c
    commands: # Test if using --insecure can be used to directly push to the registry
      - echo "$CI_WORKSPACE"
      - echo "$PWD"
@ -43,7 +43,7 @@ steps:
      - ls -lh
    directory: documentation
  "publish:documentation":
-    image: alpine/crane # because the official crane image is not compatible with woodpecker (no /bin/sh)
+    image: alpine/crane@sha256:9955edb61b8cf8d8820a6caef232bca275f064aa3c23b050645da42fba62c7df # because the official crane image is not compatible with woodpecker (no /bin/sh)
    commands:
      - crane push --insecure image.tar "container.demo.rattermeyer.de/${CI_REPO_OWNER}/${CI_REPO_NAME}"
    directory: documentation
--- a/.woodpecker/.frontend.yml
+++ b/.woodpecker/.frontend.yml
@ -3,30 +3,33 @@ when:
  path: "frontend/**"
  event: [push, tag]
 variables:
-  - &frontend_image "cl00e9ment/node.js-builder:git"
+  - &frontend_image "cl00e9ment/node.js-builder:git@sha256:c3f6622a282e81536fa07c0218dfc35aa4141076679d9ea73839ae0032bd57cb"
 clone:
  git:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
    settings:
      skip_verify: true
      partial: false
      tags: true
 steps:
  "prepare:version":
-    image: bitnami/git:2.43.0
+    image: bitnami/git:2.43.0@sha256:3932583adf73c9e7e75232c0a3637fb0ff7833d7a81c858e74468df0dbd89cf1
    commands:
      - . ./version.sh
  "prepare:frontend":
    image: *frontend_image
    depends_on: ["prepare:version"]
    commands:
-      - pnpm install
+      - pnpm install --frozen-lockfile
+      - find . -name "prettier"
    directory: frontend

  "lint:style":
    image: *frontend_image
    depends_on: ["prepare:frontend"]
    commands:
+      - sleep 7s
+      - find . -name "prettier"
      - pnpm run prettier
    directory: frontend

@ -34,6 +37,7 @@ steps:
    image: *frontend_image
    depends_on: ["prepare:frontend"]
    commands:
+      - sleep 7s
      - pnpm run lint
    directory: frontend

@ -41,6 +45,7 @@ steps:
    image: *frontend_image
    depends_on: ["prepare:frontend"]
    commands:
+      - sleep 7s
      - pnpm run build
    directory: frontend

@ -56,13 +61,11 @@ steps:
    image: *frontend_image
    depends_on: ["prepare:frontend"]
    commands:
-      - rm -rf node_modules
-      - npm install
-      - npx @cyclonedx/cyclonedx-npm --output-file bom.json
+      - sleep 7s
    directory: frontend

  "deploy:frontend":
-    image: alpine:latest
+    image: alpine:latest@sha256:c5b1261d6d3e43071626931fc004f70149baeba2c8ec672bd4f27761f8e1ad6b
    depends_on: ["build:frontend"]
    commands:
      - echo "deploy frontend"
@ -71,5 +74,5 @@ steps:
    when:
      - event: [manual]

-depends_on:
-  - "lint_general"
+#depends_on:
+#  - "lint_general"
--- a/.woodpecker/.lint_general.yml
+++ b/.woodpecker/.lint_general.yml
@ -3,12 +3,12 @@ when:
  event: [push, tag]
 clone:
  git:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
    settings:
      skip_verify: true
 steps:
  "prepare:commitlint":
-    image: bitnami/git:2.43.0
+    image: bitnami/git:2.43.0@sha256:3932583adf73c9e7e75232c0a3637fb0ff7833d7a81c858e74468df0dbd89cf1
    commands:
      - git log -1 --pretty=%B >> commitlint.txt

@ -23,13 +23,13 @@ steps:
      - branch: [main, dev]
        event: push
  "lint:precommit":
-    image: python:3.12.1-bullseye
+    image: python:3.12.1-bullseye@sha256:2d5f7c8645d454ef5bbfebec83df0f2624fb3d47ea47920484c6d140835c4cdb
    commands:
      - pip install pre-commit
      - pre-commit install
      - pre-commit run --all-files
  "lint:credentials":
-    image: ghcr.io/gitleaks/gitleaks:latest
+    image: ghcr.io/gitleaks/gitleaks:latest@sha256:6945c62ca019ead32bc337ab0c9fd055e98d82961765d38b7ccccc84dae95d0f
    commands:
      - export HOME=/home/gitleaks
      - gitleaks detect
--- a/.woodpecker/.version-update.yml
+++ b/.woodpecker/.version-update.yml
@ -4,14 +4,14 @@ when:
  event: [push]
 clone:
  git:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
    settings:
      skip_verify: true
      partial: true

 steps:
  "version:update":
-    image: bitnami/git:2.43.0
+    image: bitnami/git:2.43.0@sha256:3932583adf73c9e7e75232c0a3637fb0ff7833d7a81c858e74468df0dbd89cf1
    commands:
      - echo "$CI_COMMIT_MESSAGE" | ./version-auto-update.sh
      - git config --global http.sslVerify false
--- a/documentation/Dockerfile
+++ b/documentation/Dockerfile
@ -1,4 +1,4 @@
-FROM nginx:1.25.3-alpine
+FROM nginx:1.25.3-alpine@sha256:bb193a04d4f2026c6342fc142741d8036a27ea89674830a0fd0569d58bb2ca77

 RUN mkdir -p /docroot /var/run \
 && chgrp -R 0 /etc/nginx \
--- a/documentation/layouts/oc/package-lock.json
+++ b/documentation/layouts/oc/package-lock.json
--- a/documentation/layouts/oc/package.json
+++ b/documentation/layouts/oc/package.json
@ -17,44 +17,44 @@
    "last 2 versions"
  ],
  "devDependencies": {
-    "@asciidoctor/core": "~2.2",
-    "@fontsource/roboto": "~4.5",
-    "@fontsource/roboto-mono": "~4.5",
-    "autoprefixer": "~9.8.0",
-    "browser-pack-flat": "~3.5.0",
-    "browserify": "~16.5",
-    "cssnano": "~4.1",
-    "eslint": "~6.8",
-    "eslint-config-standard": "~14.1",
-    "eslint-plugin-import": "~2.20",
-    "eslint-plugin-node": "~11.1",
-    "eslint-plugin-promise": "~4.2",
-    "eslint-plugin-standard": "~4.0",
-    "fancy-log": "~1.3",
-    "fs-extra": "~8.1",
-    "gulp": "~4.0",
-    "gulp-cli": "^2.3.0",
-    "gulp-concat": "~2.6",
-    "gulp-connect": "~5.7",
-    "gulp-eslint": "~6.0",
-    "gulp-imagemin": "~6.2",
-    "gulp-postcss": "~8.0",
-    "gulp-stylelint": "~13.0",
-    "gulp-uglify": "~3.0",
-    "gulp-vinyl-zip": "~2.2",
-    "handlebars": "~4.7",
+    "@asciidoctor/core": "2.2.6",
+    "@fontsource/roboto": "4.5.8",
+    "@fontsource/roboto-mono": "4.5.10",
+    "autoprefixer": "9.8.8",
+    "browser-pack-flat": "3.5.0",
+    "browserify": "16.5.2",
+    "cssnano": "4.1.11",
+    "eslint": "6.8.0",
+    "eslint-config-standard": "14.1.1",
+    "eslint-plugin-import": "2.20.2",
+    "eslint-plugin-node": "11.1.0",
+    "eslint-plugin-promise": "4.2.1",
+    "eslint-plugin-standard": "4.0.2",
+    "fancy-log": "1.3.3",
+    "fs-extra": "8.1.0",
+    "gulp": "4.0.2",
+    "gulp-cli": "2.3.0",
+    "gulp-concat": "2.6.1",
+    "gulp-connect": "5.7.0",
+    "gulp-eslint": "6.0.0",
+    "gulp-imagemin": "6.2.0",
+    "gulp-postcss": "8.0.0",
+    "gulp-stylelint": "13.0.0",
+    "gulp-uglify": "3.0.2",
+    "gulp-vinyl-zip": "2.2.1",
+    "handlebars": "4.7.8",
    "highlight.js": "9.18.5",
-    "js-yaml": "~3.13",
-    "merge-stream": "~2.0",
-    "postcss-calc": "~7.0",
-    "postcss-custom-properties": "~9.1",
-    "postcss-import": "~12.0",
-    "postcss-url": "~8.0",
-    "prettier-eslint": "~9.0",
-    "require-directory": "~2.1",
-    "require-from-string": "~2.0",
-    "stylelint": "~13.3",
-    "stylelint-config-standard": "~20.0",
-    "vinyl-fs": "~3.0"
+    "js-yaml": "3.13.1",
+    "merge-stream": "2.0.0",
+    "postcss-calc": "7.0.5",
+    "postcss-custom-properties": "9.1.1",
+    "postcss-import": "12.0.1",
+    "postcss-url": "8.0.0",
+    "prettier-eslint": "9.0.2",
+    "require-directory": "2.1.1",
+    "require-from-string": "2.0.2",
+    "stylelint": "13.3.3",
+    "stylelint-config-standard": "20.0.0",
+    "vinyl-fs": "3.0.3"
  }
 }
--- a/documentation/layouts/oc/pnpm-lock.yaml
+++ b/documentation/layouts/oc/pnpm-lock.yaml
@ -6,121 +6,121 @@ settings:

 devDependencies:
  '@asciidoctor/core':
-    specifier: ~2.2
+    specifier: 2.2.6
    version: 2.2.6
  '@fontsource/roboto':
-    specifier: ~4.5
+    specifier: 4.5.8
    version: 4.5.8
  '@fontsource/roboto-mono':
-    specifier: ~4.5
+    specifier: 4.5.10
    version: 4.5.10
  autoprefixer:
-    specifier: ~9.8.0
+    specifier: 9.8.8
    version: 9.8.8
  browser-pack-flat:
-    specifier: ~3.5.0
+    specifier: 3.5.0
    version: 3.5.0
  browserify:
-    specifier: ~16.5
+    specifier: 16.5.2
    version: 16.5.2
  cssnano:
-    specifier: ~4.1
+    specifier: 4.1.11
    version: 4.1.11
  eslint:
-    specifier: ~6.8
+    specifier: 6.8.0
    version: 6.8.0
  eslint-config-standard:
-    specifier: ~14.1
+    specifier: 14.1.1
    version: 14.1.1(eslint-plugin-import@2.20.2)(eslint-plugin-node@11.1.0)(eslint-plugin-promise@4.2.1)(eslint-plugin-standard@4.0.2)(eslint@6.8.0)
  eslint-plugin-import:
-    specifier: ~2.20
+    specifier: 2.20.2
    version: 2.20.2(eslint@6.8.0)
  eslint-plugin-node:
-    specifier: ~11.1
+    specifier: 11.1.0
    version: 11.1.0(eslint@6.8.0)
  eslint-plugin-promise:
-    specifier: ~4.2
+    specifier: 4.2.1
    version: 4.2.1
  eslint-plugin-standard:
-    specifier: ~4.0
+    specifier: 4.0.2
    version: 4.0.2(eslint@6.8.0)
  fancy-log:
-    specifier: ~1.3
+    specifier: 1.3.3
    version: 1.3.3
  fs-extra:
-    specifier: ~8.1
+    specifier: 8.1.0
    version: 8.1.0
  gulp:
-    specifier: ~4.0
+    specifier: 4.0.2
    version: 4.0.2
  gulp-cli:
-    specifier: ^2.3.0
+    specifier: 2.3.0
    version: 2.3.0
  gulp-concat:
-    specifier: ~2.6
+    specifier: 2.6.1
    version: 2.6.1
  gulp-connect:
-    specifier: ~5.7
+    specifier: 5.7.0
    version: 5.7.0
  gulp-eslint:
-    specifier: ~6.0
+    specifier: 6.0.0
    version: 6.0.0
  gulp-imagemin:
-    specifier: ~6.2
+    specifier: 6.2.0
    version: 6.2.0(gulp@4.0.2)
  gulp-postcss:
-    specifier: ~8.0
+    specifier: 8.0.0
    version: 8.0.0
  gulp-stylelint:
-    specifier: ~13.0
+    specifier: 13.0.0
    version: 13.0.0(stylelint@13.3.3)
  gulp-uglify:
-    specifier: ~3.0
+    specifier: 3.0.2
    version: 3.0.2
  gulp-vinyl-zip:
-    specifier: ~2.2
+    specifier: 2.2.1
    version: 2.2.1
  handlebars:
-    specifier: ~4.7
+    specifier: 4.7.8
    version: 4.7.8
  highlight.js:
    specifier: 9.18.5
    version: 9.18.5
  js-yaml:
-    specifier: ~3.13
+    specifier: 3.13.1
    version: 3.13.1
  merge-stream:
-    specifier: ~2.0
+    specifier: 2.0.0
    version: 2.0.0
  postcss-calc:
-    specifier: ~7.0
+    specifier: 7.0.5
    version: 7.0.5
  postcss-custom-properties:
-    specifier: ~9.1
+    specifier: 9.1.1
    version: 9.1.1
  postcss-import:
-    specifier: ~12.0
+    specifier: 12.0.1
    version: 12.0.1
  postcss-url:
-    specifier: ~8.0
+    specifier: 8.0.0
    version: 8.0.0
  prettier-eslint:
-    specifier: ~9.0
+    specifier: 9.0.2
    version: 9.0.2
  require-directory:
-    specifier: ~2.1
+    specifier: 2.1.1
    version: 2.1.1
  require-from-string:
-    specifier: ~2.0
+    specifier: 2.0.2
    version: 2.0.2
  stylelint:
-    specifier: ~13.3
+    specifier: 13.3.3
    version: 13.3.3
  stylelint-config-standard:
-    specifier: ~20.0
+    specifier: 20.0.0
    version: 20.0.0(stylelint@13.3.3)
  vinyl-fs:
-    specifier: ~3.0
+    specifier: 3.0.3
    version: 3.0.3

 packages:
@ -4292,7 +4292,7 @@ packages:
      depd: 1.1.2
      inherits: 2.0.3
      setprototypeof: 1.1.0
-      statuses: 1.4.0
+      statuses: 1.5.0
    dev: true

  /http-errors@2.0.0:
--- a/documentation/package-lock.json
+++ b/documentation/package-lock.json
@ -6,11 +6,11 @@
    "": {
      "devDependencies": {
        "@antora/cli": "3.1.7",
-        "@antora/lunr-extension": "^1.0.0-alpha.8",
+        "@antora/lunr-extension": "1.0.0-alpha.8",
        "@antora/site-generator": "3.1.7",
-        "asciidoctor-kroki": "^0.18.0",
-        "http-server": "^14.1.1",
-        "linkinator": "^6.0.0"
+        "asciidoctor-kroki": "0.18.1",
+        "http-server": "14.1.1",
+        "linkinator": "6.0.4"
      }
    },
    "node_modules/@antora/asciidoc-loader": {
@ -140,7 +140,7 @@
    },
    "node_modules/@antora/lunr-extension": {
      "version": "1.0.0-alpha.8",
-      "resolved": "https://registry.npmjs.org/@antora/lunr-extension/-/lunr-extension-1.0.0-alpha.8.tgz",
+      "resolved": "http://npm.demo.rattermeyer.de/@antora/lunr-extension/-/lunr-extension-1.0.0-alpha.8.tgz",
      "integrity": "sha512-vdBgW3rsvbnmA236kT2Dckh9n0Db5za2/WxiLnFLgZ05ZO1KJQa9+R2WHaIFuGE7bKKbY+lqfM/i3KiezbL9YQ==",
      "dev": true,
      "dependencies": {
@ -1550,7 +1550,7 @@
    },
    "node_modules/http-server": {
      "version": "14.1.1",
-      "resolved": "https://registry.npmjs.org/http-server/-/http-server-14.1.1.tgz",
+      "resolved": "http://npm.demo.rattermeyer.de/http-server/-/http-server-14.1.1.tgz",
      "integrity": "sha512-+cbxadF40UXd9T01zUHgA+rlo2Bg1Srer4+B4NwIHdaGxAGGv59nYRnGGDJ9LBk7alpS0US+J+bLLdQOOkJq4A==",
      "dev": true,
      "dependencies": {
--- a/documentation/package.json
+++ b/documentation/package.json
@ -6,10 +6,10 @@
  },
  "devDependencies": {
    "@antora/cli": "3.1.7",
-    "@antora/lunr-extension": "^1.0.0-alpha.8",
+    "@antora/lunr-extension": "1.0.0-alpha.8",
    "@antora/site-generator": "3.1.7",
-    "asciidoctor-kroki": "^0.18.0",
-    "http-server": "^14.1.1",
-    "linkinator": "^6.0.0"
+    "asciidoctor-kroki": "0.18.1",
+    "http-server": "14.1.1",
+    "linkinator": "6.0.4"
  }
 }
--- a/documentation/pnpm-lock.yaml
+++ b/documentation/pnpm-lock.yaml
@ -9,19 +9,19 @@ devDependencies:
    specifier: 3.1.7
    version: 3.1.7
  '@antora/lunr-extension':
-    specifier: ^1.0.0-alpha.8
+    specifier: 1.0.0-alpha.8
    version: 1.0.0-alpha.8
  '@antora/site-generator':
    specifier: 3.1.7
    version: 3.1.7
  asciidoctor-kroki:
-    specifier: ^0.18.0
+    specifier: 0.18.1
    version: 0.18.1(@asciidoctor/core@2.2.6)
  http-server:
-    specifier: ^14.1.1
+    specifier: 14.1.1
    version: 14.1.1
  linkinator:
-    specifier: ^6.0.0
+    specifier: 6.0.4
    version: 6.0.4

 packages:
--- a/frontend/package.json
+++ b/frontend/package.json
@ -10,8 +10,8 @@
    "typecheck": "tsc",
    "lint": "eslint app",
    "lint:fix": "pnpm run lint --fix",
-    "prettier": "pnpm exec prettier . --check",
-    "prettier:fix": "pnpm exec prettier . --write"
+    "prettier": "prettier . --check",
+    "prettier:fix": "prettier . --write"
  },
  "dependencies": {
    "@remix-run/css-bundle": "^2.2.0",
@ -23,14 +23,14 @@
    "react-dom": "^18.2.0"
  },
  "devDependencies": {
-    "@remix-run/dev": "^2.2.0",
-    "@remix-run/eslint-config": "^2.2.0",
+    "@remix-run/dev": "2.2.0",
+    "@remix-run/eslint-config": "2.2.0",
    "@types/react": "^18.2.20",
    "@types/react-dom": "^18.2.7",
-    "eslint": "^8.38.0",
+    "eslint": "8.52.0",
    "eslint-config-prettier": "9.0.0",
    "prettier": "3.2.4",
-    "typescript": "^5.1.6"
+    "typescript": "5.2.2"
  },
  "engines": {
    "node": ">=18.0.0"
--- a/frontend/pnpm-lock.yaml
+++ b/frontend/pnpm-lock.yaml
@ -29,10 +29,10 @@ dependencies:

 devDependencies:
  '@remix-run/dev':
-    specifier: ^2.2.0
+    specifier: 2.2.0
    version: 2.2.0(@remix-run/serve@2.2.0)(typescript@5.2.2)
  '@remix-run/eslint-config':
-    specifier: ^2.2.0
+    specifier: 2.2.0
    version: 2.2.0(eslint@8.52.0)(react@18.2.0)(typescript@5.2.2)
  '@types/react':
    specifier: ^18.2.20
@ -41,7 +41,7 @@ devDependencies:
    specifier: ^18.2.7
    version: 18.2.14
  eslint:
-    specifier: ^8.38.0
+    specifier: 8.52.0
    version: 8.52.0
  eslint-config-prettier:
    specifier: 9.0.0
@ -50,7 +50,7 @@ devDependencies:
    specifier: 3.2.4
    version: 3.2.4
  typescript:
-    specifier: ^5.1.6
+    specifier: 5.2.2
    version: 5.2.2

 packages:
--- a/frontend/trigger-file.txt
+++ b/frontend/trigger-file.txt
@ -0,0 +1 @@
+trigger5
--- a/frontend/tsconfig.json
+++ b/frontend/tsconfig.json
@ -13,10 +13,10 @@
    "forceConsistentCasingInFileNames": true,
    "baseUrl": ".",
    "paths": {
-      "~/*": ["./app/*"]
+      "~/*": ["./app/*"],
    },

    // Remix takes care of building everything in `remix build`.
-    "noEmit": true
-  }
+    "noEmit": true,
+  },
 }
--- a/infrastructure/compose.yaml
+++ b/infrastructure/compose.yaml
@ -27,7 +27,7 @@ volumes:

 services:
  traefik:
-    image: traefik:v2.10.7
+    image: traefik:v2.10.7@sha256:6341b98aec5ec8969b99e9730f4c5b22cca3103d42b6bbe4b7a3c910758fe565
    container_name: traefik
    restart: always
    # using network mode host allows traefik access to all "docker networks"
@ -53,7 +53,7 @@ services:
      - "traefik.http.middlewares.local-ipwhitelist.ipwhitelist.sourcerange=${TRAEIFK_LOCALIP_WHITELIST}"

  smtp:
-    image: "maildev/maildev:2.1.0"
+    image: "maildev/maildev:2.1.0@sha256:f7429227b8f471b3fe761767d86a8794a2fc7488bccdcda46ea6d5ba5c2c7bf5"
    networks:
      - proxy
    ports:
@ -112,7 +112,7 @@ services:
      - "traefik.tcp.services.forgejo-ssh-svc.loadbalancer.server.port=22"

  db:
-    image: postgres:16
+    image: postgres:16@sha256:49c276fa02e3d61bd9b8db81dfb4784fe814f50f778dce5980a03817438293e3
    restart: always
    environment:
      - POSTGRES_PASSWORD=changeme
@ -128,7 +128,7 @@ services:
      - "./postgresql/initdb.d:/docker-entrypoint-initdb.d:Z"

  woodpecker-server:
-    image: woodpeckerci/woodpecker-server:v2.2.2
+    image: woodpeckerci/woodpecker-server:v2.2.2@sha256:4717456849b41b6a0d3a429c062eab9eee9616839c24a67174dd812d9693b34c
    container_name: woodpecker-server
    restart: unless-stopped
    cpus: 0.5
@ -160,7 +160,7 @@ services:

  woodpecker-agent:
    container_name: woodpecker-agent
-    image: woodpeckerci/woodpecker-agent:v2.2.2
+    image: woodpeckerci/woodpecker-agent:v2.2.2@sha256:26744e51b989b3885ffbcd8f1292fa1c47d1825c801973ea9aa714ad59003374
    restart: unless-stopped
    cpus: 2
    mem_limit: 512m
@ -176,7 +176,7 @@ services:
      - "/var/run/docker.sock:/var/run/docker.sock"

  registry:
-    image: registry:2
+    image: registry:2@sha256:f4e1b878d4bc40a1f65532d68c94dcfbab56aa8cba1f00e355a206e7f6cc9111
    container_name: registry
    networks:
      - proxy
@ -192,7 +192,7 @@ services:
      - "traefik.http.routers.registry.entrypoints=https"
      - "traefik.http.services.registry.loadbalancer.server.port=5000"
  ui:
-    image: joxit/docker-registry-ui:latest
+    image: joxit/docker-registry-ui:latest@sha256:ccb4b40737938050b2617b8c61d4287b1078c424ddafe0fcb81b5ce82a3a7198
    environment:
      - DELETE_IMAGES=true
      - REGISTRY_TITLE=My Private Docker Registry
@ -209,7 +209,7 @@ services:
      - "traefik.http.routers.regui.entrypoints=https"
      - "traefik.http.services.regui.loadbalancer.passhostheader=true"
  mvn-registry:
-    image: ghcr.io/dzikoysk/reposilite:3.5.3
+    image: ghcr.io/dzikoysk/reposilite:3.5.3@sha256:c123c706d9f6371495c5809a4d38b974d9403972b59173d1d1c336b7db49d050
    container_name: reposilite
    deploy:
      resources:
@ -232,7 +232,7 @@ services:
      - "traefik.http.routers.mvn.entrypoints=https"

  verdaccio:
-    image: verdaccio/verdaccio:5
+    image: verdaccio/verdaccio:5@sha256:c02b4c19b44df9b7a7781a30d79e5d5de2245382f223c188a7c252bf650a6a83
    container_name: verdaccio
    volumes:
      - verdaccio_data:/verdaccio/storage
--- a/infrastructure/sonarqube/Dockerfile
+++ b/infrastructure/sonarqube/Dockerfile
@ -1,4 +1,4 @@
-FROM sonarqube:10.3-community
+FROM sonarqube:10.3-community@sha256:6238f139804f450197db27474a43f6839eb488b33c204d1279efcbd15747b23b
 ARG COMMUNITY_BRANCH_VERSION=1.14.0
 ENV COMMUNITY_BRANCH_URL=https://github.com/mc1arke/sonarqube-community-branch-plugin/releases/download/${COMMUNITY_BRANCH_VERSION}/sonarqube-community-branch-plugin-${COMMUNITY_BRANCH_VERSION}.jar
 WORKDIR ${SONARQUBE_HOME}/extensions
--- a/package.json
+++ b/package.json
@ -1,5 +1,5 @@
 {
 	"devDependencies": {
-		"@commitlint/config-conventional": "^18.1.0"
+		"@commitlint/config-conventional": "18.1.0"
 	}
 }
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@ -6,7 +6,7 @@ settings:

 devDependencies:
  '@commitlint/config-conventional':
-    specifier: ^18.1.0
+    specifier: 18.1.0
    version: 18.1.0

 packages: