chore(deps): pin dependencies

| datasource | package                        | from    | to      |
| ---------- | ------------------------------ | ------- | ------- |
| npm        | @babel/core                    | 7.26.0  | 7.26.0  |
| npm        | @grafana/eslint-config         | 8.0.0   | 8.0.0   |
| npm        | @grafana/plugin-e2e            | 1.14.1  | 1.14.1  |
| npm        | @grafana/tsconfig              | 2.0.0   | 2.0.0   |
| npm        | @playwright/test               | 1.49.1  | 1.49.1  |
| npm        | @swc/core                      | 1.10.1  | 1.10.1  |
| npm        | @swc/helpers                   | 0.5.15  | 0.5.15  |
| npm        | @swc/jest                      | 0.2.37  | 0.2.37  |
| npm        | @testing-library/jest-dom      | 6.6.3   | 6.6.3   |
| npm        | @testing-library/react         | 16.1.0  | 16.1.0  |
| npm        | @types/express                 | 4.17.21 | 4.17.21 |
| npm        | @types/jest                    | 29.5.14 | 29.5.14 |
| npm        | @types/lodash                  | 4.17.13 | 4.17.13 |
| npm        | @types/node                    | 22.10.2 | 22.10.2 |
| npm        | @volkovlabs/eslint-config      | 1.3.0   | 1.3.0   |
| npm        | copy-webpack-plugin            | 12.0.2  | 12.0.2  |
| npm        | css-loader                     | 7.1.2   | 7.1.2   |
| npm        | eslint-plugin-deprecation      | 3.0.0   | 3.0.0   |
| npm        | eslint-plugin-react            | 7.37.2  | 7.37.2  |
| npm        | eslint-webpack-plugin          | 4.2.0   | 4.2.0   |
| npm        | fork-ts-checker-webpack-plugin | 9.0.2   | 9.0.2   |
| npm        | glob                           | 11.0.0  | 11.0.0  |
| npm        | jest                           | 29.7.0  | 29.7.0  |
| npm        | jest-environment-jsdom         | 29.7.0  | 29.7.0  |
| npm        | prettier                       | 3.4.2   | 3.4.2   |
| npm        | replace-in-file-webpack-plugin | 1.0.6   | 1.0.6   |
| npm        | sass                           | 1.83.0  | 1.83.0  |
| npm        | sass-loader                    | 16.0.4  | 16.0.4  |
| npm        | style-loader                   | 4.0.0   | 4.0.0   |
| npm        | swc-loader                     | 0.2.6   | 0.2.6   |
| npm        | ts-node                        | 10.9.2  | 10.9.2  |
| npm        | tsconfig-paths                 | 4.2.0   | 4.2.0   |
| npm        | webpack                        | 5.97.1  | 5.97.1  |
| npm        | webpack-cli                    | 6.0.1   | 6.0.1   |
| npm        | webpack-livereload-plugin      | 3.0.2   | 3.0.2   |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/ci.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -64,21 +64,21 @@ jobs:
           echo "checksum=$(cat ./${{ steps.metadata.outputs.archive-checksum }} | cut -d' ' -f1)" >> $GITHUB_OUTPUT
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
         with:
           directory: ./coverage/
           files: ./coverage/lcov.info
           env_vars: OS,PYTHON
           fail_ci_if_error: false
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive }}
           path: ${{ steps.metadata.outputs.archive }}
 
       - name: Upload artifact checksum
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive-checksum }}
           path: ${{ steps.metadata.outputs.archive-checksum }}

.github/workflows/codeql-analysis.yml

@@ -38,11 +38,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -69,4 +69,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2

.github/workflows/e2e.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -36,7 +36,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report
@@ -47,10 +47,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -70,7 +70,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report-dependency

.github/workflows/main.yml

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: "20"
           cache: "npm"
@@ -41,7 +41,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report

.github/workflows/release.yml

@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -72,7 +72,7 @@ jobs:
 
       - name: Create release
         id: create_release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
         with:
           tag_name: ${{ github.ref }}
           name: ${{ steps.changelog.outputs.title }}

docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   grafana:
-    image: ghcr.io/volkovlabs/app:latest
+    image: ghcr.io/volkovlabs/app:latest@sha256:7255f71881b7aa94198da4760a3c74fbbc5f6d16b592ec55f69c40c4e479b7be
     entrypoint: /run.sh
     ports:
       - 3000:3000/tcp
@@ -25,7 +25,7 @@ services:
       - dependency
 
   grafana-main:
-    image: grafana/grafana:main
+    image: grafana/grafana:main@sha256:42515aa78053db47994f08a6979da586c8b72df7402767fc1a81fb1906ef0582
     ports:
       - 3000:3000/tcp
     environment:
@@ -39,7 +39,7 @@ services:
       - main
 
   grafana-dep:
-    image: grafana/grafana:10.1.0
+    image: grafana/grafana:10.1.0@sha256:047c1c5aa6fef257b6c2516f95c8fcd9f28707c201c6413dd78328b6cbedff6f
     ports:
       - 3000:3000/tcp
     environment:

package.json

@@ -13,42 +13,42 @@
   },
   "description": "Visualize RSS/Atom feeds",
   "devDependencies": {
-    "@babel/core": "^7.26.0",
-    "@grafana/eslint-config": "^8.0.0",
-    "@grafana/plugin-e2e": "^1.14.1",
-    "@grafana/tsconfig": "^2.0.0",
-    "@playwright/test": "^1.49.1",
-    "@swc/core": "^1.10.1",
-    "@swc/helpers": "^0.5.15",
-    "@swc/jest": "^0.2.37",
-    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/react": "^16.1.0",
-    "@types/jest": "^29.5.14",
-    "@types/lodash": "^4.17.13",
-    "@types/node": "^22.10.2",
-    "@volkovlabs/eslint-config": "^1.3.0",
-    "copy-webpack-plugin": "^12.0.2",
-    "css-loader": "^7.1.2",
-    "eslint-plugin-deprecation": "^3.0.0",
-    "eslint-plugin-react": "^7.37.2",
-    "eslint-webpack-plugin": "^4.2.0",
-    "fork-ts-checker-webpack-plugin": "^9.0.2",
-    "glob": "^11.0.0",
+    "@babel/core": "7.26.0",
+    "@grafana/eslint-config": "8.0.0",
+    "@grafana/plugin-e2e": "1.14.1",
+    "@grafana/tsconfig": "2.0.0",
+    "@playwright/test": "1.49.1",
+    "@swc/core": "1.10.1",
+    "@swc/helpers": "0.5.15",
+    "@swc/jest": "0.2.37",
+    "@testing-library/jest-dom": "6.6.3",
+    "@testing-library/react": "16.1.0",
+    "@types/jest": "29.5.14",
+    "@types/lodash": "4.17.13",
+    "@types/node": "22.10.2",
+    "@volkovlabs/eslint-config": "1.3.0",
+    "copy-webpack-plugin": "12.0.2",
+    "css-loader": "7.1.2",
+    "eslint-plugin-deprecation": "3.0.0",
+    "eslint-plugin-react": "7.37.2",
+    "eslint-webpack-plugin": "4.2.0",
+    "fork-ts-checker-webpack-plugin": "9.0.2",
+    "glob": "11.0.0",
     "identity-obj-proxy": "3.0.0",
-    "jest": "^29.7.0",
-    "jest-environment-jsdom": "^29.7.0",
-    "prettier": "^3.4.2",
-    "replace-in-file-webpack-plugin": "^1.0.6",
-    "sass": "^1.83.0",
-    "sass-loader": "^16.0.4",
-    "style-loader": "^4.0.0",
-    "swc-loader": "^0.2.6",
-    "ts-node": "^10.9.2",
-    "tsconfig-paths": "^4.2.0",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
+    "prettier": "3.4.2",
+    "replace-in-file-webpack-plugin": "1.0.6",
+    "sass": "1.83.0",
+    "sass-loader": "16.0.4",
+    "style-loader": "4.0.0",
+    "swc-loader": "0.2.6",
+    "ts-node": "10.9.2",
+    "tsconfig-paths": "4.2.0",
     "typescript": "5.7.2",
-    "webpack": "^5.97.1",
-    "webpack-cli": "^6.0.1",
-    "webpack-livereload-plugin": "^3.0.2"
+    "webpack": "5.97.1",
+    "webpack-cli": "6.0.1",
+    "webpack-livereload-plugin": "3.0.2"
   },
   "engines": {
     "node": ">=20"

test/Dockerfile

@@ -1,5 +1,5 @@
 # Get the latest version of Playwright
-FROM mcr.microsoft.com/playwright:focal
+FROM mcr.microsoft.com/playwright:focal@sha256:2286c685f2be91dd3ee482f1a3d382af08c9a1049406c9f7b499aec6ad691a2c
 
 # Set the work directory for the application
 WORKDIR app

xml-server/Dockerfile

@@ -1,4 +1,4 @@
-FROM node
+FROM node@sha256:7a78e83b764befdf57c544b4770f688e5b4e2a8eefcf96481ab3c32e6ec5d986
 
 ## Create app directory
 WORKDIR /app