chore: Update packages and pin versions

.github/workflows/benchmarks.yml

@@ -11,11 +11,11 @@ jobs:
     name: Run Benchmarks and Comment
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
         with:
           bun-version: 1.2.17
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           cache: 'npm'
 
@@ -29,7 +29,7 @@ jobs:
         run: dfx cache install
 
       - name: Cache mops packages
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: mops-packages-${{ hashFiles('mops.toml') }}
           restore-keys: |
@@ -59,17 +59,17 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
 
       - name: Find Comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
         id: fc
         with:
           issue-number: ${{ github.event.pull_request.number }}
           comment-author: 'github-actions[bot]'
           body-includes: Benchmark Results
 
       - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
         with:
           comment-id: ${{ steps.fc.outputs.comment-id }}
           issue-number: ${{ github.event.pull_request.number }}
           body: ${{ steps.benchmarks.outputs.result }}
-          edit-mode: replace
+          edit-mode: replace

.github/workflows/build-hash.yml

@@ -12,9 +12,9 @@ jobs:
     runs-on: ${{ matrix.os }}
     name: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       - name: Set up Docker
-        uses: docker/setup-docker-action@v4
+        uses: docker/setup-docker-action@b60f85385d03ac8acfca6d9996982511d8620a19 # v4.3.0
       - name: Build using Docker
         run: |
           # MOPS_VERSION=$(cd cli && npm pkg get version | tr -d \")
@@ -27,4 +27,4 @@ jobs:
           cd cli
           docker build . --build-arg COMMIT_HASH=${{ github.sha }} --build-arg MOPS_VERSION=$MOPS_VERSION -t mops
           OUTPUT=$(docker run --rm mops || echo ".")
-          echo "$OUTPUT" >> $GITHUB_STEP_SUMMARY
+          echo "$OUTPUT" >> $GITHUB_STEP_SUMMARY

.github/workflows/ci.yml

@@ -20,20 +20,20 @@ jobs:
     name: node ${{ matrix.node-version }}, moc ${{ matrix.moc-version }}, ${{ matrix.mops-version }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
         with:
           bun-version: 1.2.17
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
-      - uses: oven-sh/setup-bun@v1.1.1
+      - uses: oven-sh/setup-bun@9b21598af8d4dfc302e5a30250007de0fda92acc # v1.1.1
 
       - uses: dfinity/setup-dfx@main
 
       - name: Cache mops packages
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: mops-packages-${{ runner.os }}-${{ hashFiles('mops.toml') }}
           restore-keys: |
@@ -75,4 +75,4 @@ jobs:
         run: npm run build-blog
 
       - name: Build CLI releases
-        run: npm run build-cli-releases
+        run: npm run build-cli-releases

.github/workflows/cli-bundle.yml

@@ -18,11 +18,11 @@ jobs:
     name: ${{ matrix.os }}, node ${{ matrix.node-version }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
         with:
           bun-version: 1.2.17
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
@@ -45,4 +45,4 @@ jobs:
       - name: Check global bundle
         run: mops -v
 
-      - run: mops format
+      - run: mops format

.github/workflows/lint.yml

@@ -11,11 +11,11 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 20
       - name: Lint
         run: |
             npm i
-            npm run lint
+            npm run lint

.github/workflows/mops-test.yml

@@ -22,18 +22,18 @@ jobs:
     name: ${{ matrix.runner }}, node ${{ matrix.node-version }}, moc ${{ matrix.moc-version }}, ${{ matrix.mops-version }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
         with:
           bun-version: 1.2.17
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
       - uses: dfinity/setup-dfx@main
       - run: dfx cache install
       - name: Cache mops packages
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: mops-packages-${{ runner.os }}-${{ hashFiles('mops.toml') }}
           restore-keys: |
@@ -64,4 +64,4 @@ jobs:
         run: mops toolchain use moc ${{ matrix.moc-version }}
 
       - name: Run tests
-        run: mops test
+        run: mops test

.github/workflows/setup-mops.yml

@@ -12,10 +12,10 @@ jobs:
     name: Test with ZenVoich/setup-mops
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       - uses: dfinity/setup-dfx@main
-      - uses: ZenVoich/setup-mops@v1
+      - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1.0.0
       - name: Run tests
-        run: mops test
+        run: mops test