Pin dependencies

Author: renovate[bot]

.github/workflows/changeset-release.yml

@@ -37,13 +37,13 @@ jobs:
       notes: ${{ steps.notes.outputs.notes }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.1.0
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@v2.2.0
         name: Setup Bun
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.5.0
         with:
           node-version-file: .nvmrc
 
@@ -77,12 +77,12 @@ jobs:
     environment: "Production"
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v6
-      - uses: oven-sh/setup-bun@v2
+        uses: actions/checkout@v6.1.0
+      - uses: oven-sh/setup-bun@v2.2.0
         name: Setup Bun
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.5.0
         with:
           node-version-file: .nvmrc
       - name: Install Deps
@@ -94,27 +94,27 @@ jobs:
           VITE_URL: ${{ secrets.VITE_URL }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@v4.2.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v4.2.0
 
       - name: Docker Login
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v6.2.0
         with:
           images: ghcr.io/team3132/attendance
           tags: type=semver,pattern={{version}},value=${{ fromJson(needs.release.outputs.publishedPackages)[0].version }}
 
       - name: Build and Push
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v7.3.0
         with:
           tags: ${{ steps.meta.outputs.tags }}
           push: ${{ needs.release.outputs.published == 'true' }}
@@ -148,16 +148,16 @@ jobs:
     environment: Production
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
+        uses: actions/checkout@v6.1.0
+      - uses: actions/setup-node@v6.5.0
         name: Setup Node
         with:
           node-version: 24.15.0
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@v2.2.0
         name: Setup Bun
         with:
           bun-version: latest
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.7.0
         name: Setup Java
         if: ${{ matrix.mobile == 'android' }}
         with:
@@ -180,7 +180,7 @@ jobs:
           targets: ${{ matrix.platform == 'macos-latest' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }}
 
       - name: Rust Cache
-        uses: swatinem/rust-cache@v2
+        uses: swatinem/rust-cache@v2.9.2
         with:
           workspaces: './src-tauri -> target'
           prefix-key: ${{ matrix.mobile }}

.github/workflows/deploy.yml

@@ -25,9 +25,9 @@ jobs:
     environment: Production
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.1.0
       - name: Setup Tailscale
-        uses: tailscale/github-action@v4
+        uses: tailscale/github-action@v4.1.3
         with:
           oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
           oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}

.github/workflows/job-check.yml

@@ -12,11 +12,11 @@ jobs:
     name: Lint and Type Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@v6.1.0
+      - uses: oven-sh/setup-bun@v2.2.0
         name: Setup Bun
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v6.5.0
         with:
           node-version-file: .nvmrc
       - name: Install Dependancies

.github/workflows/playwright.yml

@@ -11,19 +11,19 @@ jobs:
     runs-on: ubuntu-latest
     name: Run Playwright Tests
     steps:
-    - uses: actions/checkout@v6
-    - uses: actions/setup-node@v6
+    - uses: actions/checkout@v6.1.0
+    - uses: actions/setup-node@v6.5.0
       with:
         node-version-file: .nvmrc
-    - uses: oven-sh/setup-bun@v2
+    - uses: oven-sh/setup-bun@v2.2.0
       name: Setup Bun
     - name: Install dependencies
       run: bun i --frozen-lockfile
     - name: Install Playwright Browsers
       run: bunx playwright install --with-deps chromium
     - name: Run Playwright tests
       run: bun playwright test
-    - uses: actions/upload-artifact@v7
+    - uses: actions/upload-artifact@v7.0.1
       if: ${{ !cancelled() }}
       with:
         name: playwright-report