chore(deps): pin dependencies

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
@babel/core (source)	devDependencies	pin	^7.26.0 -> 7.26.0
@grafana/eslint-config	devDependencies	pin	^8.0.0 -> 8.0.0
@grafana/plugin-e2e (source)	devDependencies	pin	^1.14.1 -> 1.14.1
@grafana/tsconfig (source)	devDependencies	pin	^2.0.0 -> 2.0.0
@playwright/test (source)	devDependencies	pin	^1.49.1 -> 1.49.1
@swc/core (source)	devDependencies	pin	^1.10.1 -> 1.10.1
@swc/helpers (source)	devDependencies	pin	^0.5.15 -> 0.5.15
@swc/jest (source)	devDependencies	pin	^0.2.37 -> 0.2.37
@testing-library/jest-dom	devDependencies	pin	^6.6.3 -> 6.6.3
@testing-library/react	devDependencies	pin	^16.1.0 -> 16.1.0
@types/express (source)	devDependencies	pin	^4.17.21 -> 4.17.21
@types/jest (source)	devDependencies	pin	^29.5.14 -> 29.5.14
@types/lodash (source)	devDependencies	pin	^4.17.13 -> 4.17.13
@types/node (source)	devDependencies	pin	^22.10.2 -> 22.10.2
@​volkovlabs/eslint-config	devDependencies	pin	^1.3.0 -> 1.3.0
actions/checkout	action	pinDigest	-> 34e1148
actions/checkout	action	pinDigest	-> f43a0e5
actions/setup-node	action	pinDigest	-> 49933ea
actions/upload-artifact	action	pinDigest	-> ea165f8
codecov/codecov-action	action	pinDigest	-> b9fd7d1
copy-webpack-plugin	devDependencies	pin	^12.0.2 -> 12.0.2
css-loader	devDependencies	pin	^7.1.2 -> 7.1.2
eslint-plugin-deprecation	devDependencies	pin	^3.0.0 -> 3.0.0
eslint-plugin-react	devDependencies	pin	^7.37.2 -> 7.37.2
eslint-webpack-plugin	devDependencies	pin	^4.2.0 -> 4.2.0
fork-ts-checker-webpack-plugin	devDependencies	pin	^9.0.2 -> 9.0.2
ghcr.io/volkovlabs/app		pinDigest	-> 7255f71
github/codeql-action	action	pinDigest	-> b8d3b6e
grafana/grafana		pinDigest	-> 047c1c5
grafana/grafana		pinDigest	-> 23e0c51
jest (source)	devDependencies	pin	^29.7.0 -> 29.7.0
jest-environment-jsdom (source)	devDependencies	pin	^29.7.0 -> 29.7.0
mcr.microsoft.com/playwright	final	pinDigest	-> 2286c68
node	final	pinDigest	-> 7478f37
prettier (source)	devDependencies	pin	^3.4.2 -> 3.4.2
replace-in-file-webpack-plugin	devDependencies	pin	^1.0.6 -> 1.0.6
sass	devDependencies	pin	^1.83.0 -> 1.83.0
sass-loader	devDependencies	pin	^16.0.4 -> 16.0.4
softprops/action-gh-release	action	pinDigest	-> de2c0eb
style-loader	devDependencies	pin	^4.0.0 -> 4.0.0
swc-loader	devDependencies	pin	^0.2.6 -> 0.2.6
ts-node (source)	devDependencies	pin	^10.9.2 -> 10.9.2
tsconfig-paths	devDependencies	pin	^4.2.0 -> 4.2.0
webpack	devDependencies	pin	^5.97.1 -> 5.97.1
webpack-cli (source)	devDependencies	pin	^6.0.1 -> 6.0.1
webpack-livereload-plugin	devDependencies	pin	^3.0.2 -> 3.0.2

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[renovate-sh-app]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: [email protected]
npm error Found: @types/[email protected]
npm error node_modules/@types/react
npm error   @types/react@"*" from @types/[email protected]
npm error   node_modules/@types/hoist-non-react-statics
npm error     @types/hoist-non-react-statics@"^3.3.1" from [email protected]
npm error     node_modules/react-redux
npm error       react-redux@"^8.1.3" from @hello-pangea/[email protected]
npm error       node_modules/@hello-pangea/dnd
npm error         @hello-pangea/dnd@"16.6.0" from @grafana/[email protected]
npm error         node_modules/@grafana/ui
npm error   @types/react@"*" from @types/[email protected]
npm error   node_modules/@types/react-table
npm error     @types/react-table@"7.7.20" from @grafana/[email protected]
npm error     node_modules/@grafana/ui
npm error       @grafana/ui@"^11.4.0" from the root project
npm error       1 more (@grafana/runtime)
npm error   3 more (@types/react-transition-group, react-calendar, react-redux)
npm error
npm error Could not resolve dependency:
npm error dev @testing-library/react@"16.1.0" from the root project
npm error
npm error Conflicting peer dependency: @types/[email protected]
npm error node_modules/@types/react
npm error   peer @types/react@"^19.2.0" from @types/[email protected]
npm error   node_modules/@types/react-dom
npm error     peerOptional @types/react-dom@"^18.0.0 || ^19.0.0" from @testing-library/[email protected]
npm error     node_modules/@testing-library/react
npm error       dev @testing-library/react@"16.1.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2025-12-08T18_27_16_735Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2025-12-08T18_27_16_735Z-debug-0.log

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high

[github-actions]

😢 zizmor failed with exit code 14.

Expand for full output

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

51 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 1 high