From 8a510df96496461d187c350bfab573605b4a9b1c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 14 Dec 2023 21:02:01 +0900 Subject: [PATCH] deps: pin dependencies (#32) --- .github/workflows/ci.yml | 4 +- .github/workflows/docker-publish.yml | 8 +-- Dockerfile | 4 +- package-lock.json | 82 +++++++++++----------------- package.json | 34 ++++++------ 5 files changed, 57 insertions(+), 75 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ac84eb71..38a191c6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,9 +9,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4.1.1 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Setup Node.js - uses: actions/setup-node@v4.0.0 + uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0 with: node-version: 20 cache: npm diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index ebbf6dd2..37d2eb88 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -26,20 +26,20 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.1.1 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3.0.0 + uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0 - name: Log in to the Container registry - uses: docker/login-action@v3.0.0 + uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Docker Metadata - uses: docker/metadata-action@v5.3.0 + uses: docker/metadata-action@31cebacef4805868f9ce9a0cb03ee36c32df2ac4 # v5.3.0 id: metadata with: images: ghcr.io/${{ github.repository_owner }}/${{ env.IMAGE_NAME }} diff --git a/Dockerfile b/Dockerfile index 809f152f..bf6e302d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -# syntax=docker/dockerfile:1 +# syntax=docker/dockerfile:1@sha256:ac85f380a63b13dfcefa89046420e1781752bab202122f8f50032edf31be0021 FROM node:20.10.0-bookworm AS deps ARG NODE_ENV=production @@ -25,7 +25,7 @@ RUN wget http://downloads.sourceforge.net/open-jtalk/hts_voice_nitech_jp_atr503_ && tar xzf hts_voice_nitech_jp_atr503_m001-1.05.tar.gz \ && rm hts_voice_nitech_jp_atr503_m001-1.05.tar.gz -FROM gcr.io/distroless/nodejs20-debian12:nonroot AS runner +FROM gcr.io/distroless/nodejs20-debian12:nonroot@sha256:375bec317b659469f2abb7df949a81ae5c4120c5bc0acad2c8bfb283cea19cc1 AS runner WORKDIR /app ENV NODE_ENV=production COPY ./package.json ./ diff --git a/package-lock.json b/package-lock.json index 5a058284..8d7810fd 100644 --- a/package-lock.json +++ b/package-lock.json @@ -9,26 +9,26 @@ "version": "0.1.0", "license": "MIT", "dependencies": { - "@discordjs/opus": "^0.9.0", - "@discordjs/voice": "^0.16.0", - "discord.js": "^14.13.0", + "@discordjs/opus": "0.9.0", + "@discordjs/voice": "0.16.0", + "discord.js": "14.13.0", "node-altjtalk-binding": "https://github.com/femshima/node-altjtalk-binding/releases/download/v0.1.3/node.tar.gz", - "sodium-native": "^4.0.4" + "sodium-native": "4.0.4" }, "devDependencies": { - "@types/node": "20", - "@typescript-eslint/eslint-plugin": "^6.7.5", - "@typescript-eslint/parser": "^6.7.5", - "dotenv": "^16.3.1", - "esbuild": "^0.19.4", - "eslint": "^8.51.0", - "eslint-config-prettier": "^9.0.0", - "eslint-plugin-import": "^2.28.1", - "lint-staged": "^15.0.1", - "prettier": "^3.0.3", - "simple-git-hooks": "^2.9.0", - "ts-node": "^10.9.1", - "typescript": "^5.2.2" + "@types/node": "20.10.4", + "@typescript-eslint/eslint-plugin": "6.7.5", + "@typescript-eslint/parser": "6.7.5", + "dotenv": "16.3.1", + "esbuild": "0.19.4", + "eslint": "8.51.0", + "eslint-config-prettier": "9.0.0", + "eslint-plugin-import": "2.28.1", + "lint-staged": "15.0.1", + "prettier": "3.0.3", + "simple-git-hooks": "2.9.0", + "ts-node": "10.9.1", + "typescript": "5.2.2" } }, "node_modules/@aashutoshrathi/word-wrap": { @@ -120,11 +120,6 @@ "node": ">=12.0.0" } }, - "node_modules/@discordjs/opus/node_modules/node-addon-api": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-5.1.0.tgz", - "integrity": "sha512-eh0GgfEkpnoWDq+VY8OyvYhFEzBk6jIYbRKdIlyTiAXIVJ8PyBaKb0rp7oDtoddbdoHWhq8wwr+XZ81F1rpNdA==" - }, "node_modules/@discordjs/rest": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/@discordjs/rest/-/rest-2.0.1.tgz", @@ -1896,19 +1891,7 @@ "semver": "bin/semver.js" } }, - "node_modules/eslint-visitor-keys": { - "version": "3.4.3", - "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz", - "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==", - "dev": true, - "engines": { - "node": "^12.22.0 || ^14.17.0 || >=16.0.0" - }, - "funding": { - "url": "https://opencollective.com/eslint" - } - }, - "node_modules/eslint/node_modules/eslint-scope": { + "node_modules/eslint-scope": { "version": "7.2.2", "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-7.2.2.tgz", "integrity": "sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg==", @@ -1924,13 +1907,16 @@ "url": "https://opencollective.com/eslint" } }, - "node_modules/eslint/node_modules/estraverse": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz", - "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==", + "node_modules/eslint-visitor-keys": { + "version": "3.4.3", + "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz", + "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==", "dev": true, "engines": { - "node": ">=4.0" + "node": "^12.22.0 || ^14.17.0 || >=16.0.0" + }, + "funding": { + "url": "https://opencollective.com/eslint" } }, "node_modules/espree": { @@ -1962,15 +1948,6 @@ "node": ">=0.10" } }, - "node_modules/esquery/node_modules/estraverse": { - "version": "5.3.0", - "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz", - "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==", - "dev": true, - "engines": { - "node": ">=4.0" - } - }, "node_modules/esrecurse": { "version": "4.3.0", "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz", @@ -1983,7 +1960,7 @@ "node": ">=4.0" } }, - "node_modules/esrecurse/node_modules/estraverse": { + "node_modules/estraverse": { "version": "5.3.0", "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz", "integrity": "sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==", @@ -3205,6 +3182,11 @@ "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==", "dev": true }, + "node_modules/node-addon-api": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-5.1.0.tgz", + "integrity": "sha512-eh0GgfEkpnoWDq+VY8OyvYhFEzBk6jIYbRKdIlyTiAXIVJ8PyBaKb0rp7oDtoddbdoHWhq8wwr+XZ81F1rpNdA==" + }, "node_modules/node-altjtalk-binding": { "version": "0.1.3", "resolved": "https://github.com/femshima/node-altjtalk-binding/releases/download/v0.1.3/node.tar.gz", diff --git a/package.json b/package.json index dafd78a5..09801410 100644 --- a/package.json +++ b/package.json @@ -18,25 +18,25 @@ "author": "Discord.js Japan User Group (discordjs-japan.org)", "license": "MIT", "devDependencies": { - "@types/node": "20", - "@typescript-eslint/eslint-plugin": "^6.7.5", - "@typescript-eslint/parser": "^6.7.5", - "dotenv": "^16.3.1", - "esbuild": "^0.19.4", - "eslint": "^8.51.0", - "eslint-config-prettier": "^9.0.0", - "eslint-plugin-import": "^2.28.1", - "lint-staged": "^15.0.1", - "prettier": "^3.0.3", - "simple-git-hooks": "^2.9.0", - "ts-node": "^10.9.1", - "typescript": "^5.2.2" + "@types/node": "20.10.4", + "@typescript-eslint/eslint-plugin": "6.7.5", + "@typescript-eslint/parser": "6.7.5", + "dotenv": "16.3.1", + "esbuild": "0.19.4", + "eslint": "8.51.0", + "eslint-config-prettier": "9.0.0", + "eslint-plugin-import": "2.28.1", + "lint-staged": "15.0.1", + "prettier": "3.0.3", + "simple-git-hooks": "2.9.0", + "ts-node": "10.9.1", + "typescript": "5.2.2" }, "dependencies": { - "@discordjs/opus": "^0.9.0", - "@discordjs/voice": "^0.16.0", - "discord.js": "^14.13.0", + "@discordjs/opus": "0.9.0", + "@discordjs/voice": "0.16.0", + "discord.js": "14.13.0", "node-altjtalk-binding": "https://github.com/femshima/node-altjtalk-binding/releases/download/v0.1.3/node.tar.gz", - "sodium-native": "^4.0.4" + "sodium-native": "4.0.4" } }