From 58cd0683757c0f53193eb5b1f13615dca959d43e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 24 Aug 2024 15:11:34 +0900
Subject: [PATCH] chore(deps): pin dependencies (#134)

* chore(deps): pin dependencies

* Update dprint.json

* Update .yamllint

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hiroyuki Okada <ok.okada.hiroyuki@gmail.com>
---
 .devcontainer/Dockerfile          |  6 +++---
 .github/workflows/nodejs.yml      | 10 +++++-----
 .github/workflows/npm-publish.yml |  4 ++--
 .github/workflows/pre-commit.yml  |  4 ++--
 .yamllint                         |  6 ++++++
 dprint.json                       |  2 --
 6 files changed, 18 insertions(+), 14 deletions(-)

diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 44dee33..ac607c0 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,7 +1,7 @@
-FROM hadolint/hadolint:v2.12.0-alpine AS dockerfile-lint
-FROM koalaman/shellcheck:v0.10.0 AS shellcheck
+FROM hadolint/hadolint:v2.12.0-alpine@sha256:3c206a451cec6d486367e758645269fd7d696c5ccb6ff59d8b03b0e45268a199 AS dockerfile-lint
+FROM koalaman/shellcheck:v0.10.0@sha256:2097951f02e735b613f4a34de20c40f937a6c8f18ecb170612c88c34517221fb AS shellcheck
 
-FROM mcr.microsoft.com/devcontainers/typescript-node:1-18
+FROM mcr.microsoft.com/devcontainers/typescript-node:1-18@sha256:3bf355e6423ea302ed0d974bd942d189c135dcde12f29f3ff357dabf78050887
 
 COPY --from=dockerfile-lint /bin/hadolint /usr/bin/hadolint
 COPY --from=shellcheck /bin/shellcheck /usr/bin/
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index e17a44b..313a540 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
@@ -31,16 +31,16 @@ jobs:
     timeout-minutes: 5
     needs: test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
       - uses: ./.github/actions/composite-actions/setup-node
       - name: set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4
         with:
           distribution: ${{env.JAVA_DISTRIBUTION}}
           java-version: ${{env.JAVA_VERSION}}
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 831b4da..b5cd8ca 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -19,8 +19,8 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 2fad972..1f6b1fd 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -13,8 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
diff --git a/.yamllint b/.yamllint
index e907140..f060428 100644
--- a/.yamllint
+++ b/.yamllint
@@ -1,2 +1,8 @@
 ---
 extends: default
+rules:
+    line-length:
+        max: 140
+        level: warning
+    comments:
+        min-spaces-from-content: 1
diff --git a/dprint.json b/dprint.json
index 405efbf..19e0f14 100644
--- a/dprint.json
+++ b/dprint.json
@@ -1,7 +1,6 @@
 {
   "markdown": {},
   "toml": {},
-  "dockerfile": {},
   "biome": {
     "indentStyle": "space",
     "indentSize": 2,
@@ -12,7 +11,6 @@
   "plugins": [
     "https://plugins.dprint.dev/markdown-0.17.6.wasm",
     "https://plugins.dprint.dev/toml-0.6.2.wasm",
-    "https://plugins.dprint.dev/dockerfile-0.3.2.wasm",
     "https://plugins.dprint.dev/biome-0.6.0.wasm",
     "https://plugins.dprint.dev/g-plane/pretty_yaml-v0.4.0.wasm"
   ]