deps: pin dependencies (#32)

.github/workflows/ci.yml

@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Setup Node.js
-        uses: actions/[email protected]
+        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
         with:
           node-version: 20
           cache: npm

.github/workflows/docker-publish.yml

@@ -26,20 +26,20 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/[email protected]
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Set up Docker Buildx
-        uses: docker/[email protected]
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
 
       - name: Log in to the Container registry
-        uses: docker/[email protected]
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker Metadata
-        uses: docker/[email protected]
+        uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4 # v5.3.0
         id: metadata
         with:
           images: ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}

Dockerfile

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1
+# syntax=docker/dockerfile:1@sha256:ac85f380a63b13dfcefa89046420e1781752bab202122f8f50032edf31be0021
 
 FROM node:20.10.0-bookworm AS deps
 ARG NODE_ENV=production
@@ -25,7 +25,7 @@ RUN wget http://downloads.sourceforge.net/open-jtalk/hts_voice_nitech_jp_atr503_
     && tar xzf hts_voice_nitech_jp_atr503_m001-1.05.tar.gz \
     && rm hts_voice_nitech_jp_atr503_m001-1.05.tar.gz
 
-FROM gcr.io/distroless/nodejs20-debian12:nonroot AS runner
+FROM gcr.io/distroless/nodejs20-debian12:nonroot@sha256:375bec317b659469f2abb7df949a81ae5c4120c5bc0acad2c8bfb283cea19cc1 AS runner
 WORKDIR /app
 ENV NODE_ENV=production
 COPY ./package.json ./

package.json

@@ -18,25 +18,25 @@
   "author": "Discord.js Japan User Group (discordjs-japan.org)",
   "license": "MIT",
   "devDependencies": {
-    "@types/node": "20",
-    "@typescript-eslint/eslint-plugin": "^6.7.5",
-    "@typescript-eslint/parser": "^6.7.5",
-    "dotenv": "^16.3.1",
-    "esbuild": "^0.19.4",
-    "eslint": "^8.51.0",
-    "eslint-config-prettier": "^9.0.0",
-    "eslint-plugin-import": "^2.28.1",
-    "lint-staged": "^15.0.1",
-    "prettier": "^3.0.3",
-    "simple-git-hooks": "^2.9.0",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.2.2"
+    "@types/node": "20.10.4",
+    "@typescript-eslint/eslint-plugin": "6.7.5",
+    "@typescript-eslint/parser": "6.7.5",
+    "dotenv": "16.3.1",
+    "esbuild": "0.19.4",
+    "eslint": "8.51.0",
+    "eslint-config-prettier": "9.0.0",
+    "eslint-plugin-import": "2.28.1",
+    "lint-staged": "15.0.1",
+    "prettier": "3.0.3",
+    "simple-git-hooks": "2.9.0",
+    "ts-node": "10.9.1",
+    "typescript": "5.2.2"
   },
   "dependencies": {
-    "@discordjs/opus": "^0.9.0",
-    "@discordjs/voice": "^0.16.0",
-    "discord.js": "^14.13.0",
+    "@discordjs/opus": "0.9.0",
+    "@discordjs/voice": "0.16.0",
+    "discord.js": "14.13.0",
     "node-altjtalk-binding": "https://github.com/femshima/node-altjtalk-binding/releases/download/v0.1.3/node.tar.gz",
-    "sodium-native": "^4.0.4"
+    "sodium-native": "4.0.4"
   }
 }