chore(deps): pin dependencies

.devcontainer/Dockerfile

@@ -1,7 +1,7 @@
-FROM hadolint/hadolint:v2.12.0-alpine AS dockerfile-lint
-FROM koalaman/shellcheck:v0.10.0 AS shellcheck
+FROM hadolint/hadolint:v2.12.0-alpine@sha256:3c206a451cec6d486367e758645269fd7d696c5ccb6ff59d8b03b0e45268a199 AS dockerfile-lint
+FROM koalaman/shellcheck:v0.10.0@sha256:2097951f02e735b613f4a34de20c40f937a6c8f18ecb170612c88c34517221fb AS shellcheck
 
-FROM mcr.microsoft.com/devcontainers/typescript-node:1-18
+FROM mcr.microsoft.com/devcontainers/typescript-node:1-18@sha256:3bf355e6423ea302ed0d974bd942d189c135dcde12f29f3ff357dabf78050887
 
 COPY --from=dockerfile-lint /bin/hadolint /usr/bin/hadolint
 COPY --from=shellcheck /bin/shellcheck /usr/bin/

.github/workflows/nodejs.yml

@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
@@ -31,16 +31,16 @@ jobs:
     timeout-minutes: 5
     needs: test
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions
       - uses: ./.github/actions/composite-actions/setup-node
       - name: set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4
         with:
           distribution: ${{env.JAVA_DISTRIBUTION}}
           java-version: ${{env.JAVA_VERSION}}

.github/workflows/npm-publish.yml

@@ -19,8 +19,8 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions

.github/workflows/pre-commit.yml

@@ -13,8 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           repository: okhiroyuki/composite-actions
           path: ./.github/actions/composite-actions

.yamllint

@@ -1,2 +1,8 @@
 ---
 extends: default
+rules:
+    line-length:
+        max: 140
+        level: warning
+    comments:
+        min-spaces-from-content: 1

dprint.json

@@ -1,7 +1,6 @@
 {
   "markdown": {},
   "toml": {},
-  "dockerfile": {},
   "biome": {
     "indentStyle": "space",
     "indentSize": 2,
@@ -12,7 +11,6 @@
   "plugins": [
     "https://plugins.dprint.dev/markdown-0.17.6.wasm",
     "https://plugins.dprint.dev/toml-0.6.2.wasm",
-    "https://plugins.dprint.dev/dockerfile-0.3.2.wasm",
     "https://plugins.dprint.dev/biome-0.6.0.wasm",
     "https://plugins.dprint.dev/g-plane/pretty_yaml-v0.4.0.wasm"
   ]