chore(deps): pin dependencies - autoclosed

.github/actions/prepare/action.yml

@@ -7,7 +7,7 @@ runs:
     - uses: pnpm/action-setup@v2
       with:
         version: 9
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         cache: pnpm
         node-version: "20"

.github/workflows/accessibility-alt-text-bot.yml

@@ -3,7 +3,7 @@ jobs:
     if: ${{ !endsWith(github.actor, '[bot]') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: github/accessibility-alt-text-bot@v1.4.0
+      - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0
 
 name: Accessibility Alt Text Bot
 

.github/workflows/build.yml

@@ -2,7 +2,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: node ./lib/index.js

.github/workflows/contributors.yml

@@ -2,13 +2,13 @@ jobs:
   contributors:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
       - uses: ./.github/actions/prepare
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
-        uses: JoshuaKGoldberg/all-contributors-auto-action@v0.4.3
+        uses: JoshuaKGoldberg/all-contributors-auto-action@da2f2aa14f945bd45c882b83356f24e6dce91629 # v0.4.3
 
 name: Contributors
 

.github/workflows/lint-knip.yml

@@ -2,7 +2,7 @@ jobs:
   lint_knip:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:knip
 

.github/workflows/lint-markdown.yml

@@ -2,7 +2,7 @@ jobs:
   lint_markdown:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:md
 

.github/workflows/lint-packages.yml

@@ -2,7 +2,7 @@ jobs:
   lint_packages:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:packages
 

.github/workflows/lint-spelling.yml

@@ -2,7 +2,7 @@ jobs:
   lint_spelling:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:spelling
 

.github/workflows/lint.yml

@@ -2,7 +2,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint
 

.github/workflows/post-release.yml

@@ -2,11 +2,11 @@ jobs:
   post_release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
       - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV"
-      - uses: apexskier/github-release-commenter@v1
+      - uses: apexskier/github-release-commenter@e7813a9625eabd79a875b4bc4046cfcae377ab34 # v1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           comment-template: |

.github/workflows/pr-review-requested.yml

@@ -2,7 +2,7 @@ jobs:
   pr_review_requested:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1
         with:
           labels: "status: waiting for author"
       - if: failure()

.github/workflows/prettier.yml

@@ -2,7 +2,7 @@ jobs:
   prettier:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm format --list-different
 

.github/workflows/release.yml

@@ -5,7 +5,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
           ref: main
@@ -14,7 +14,7 @@ jobs:
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        uses: JoshuaKGoldberg/release-it-action@v0.2.2
+        uses: JoshuaKGoldberg/release-it-action@77373cfc2535e21149518381cb09e1c04c6068fe # v0.2.2
 
 name: Release
 

.github/workflows/test.yml

@@ -2,7 +2,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run test --coverage
       - name: Codecov

.github/workflows/tsc.yml

@@ -2,7 +2,7 @@ jobs:
   type_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm tsc
 

package.json

@@ -40,41 +40,41 @@
     "prettier": "3.3.2"
   },
   "devDependencies": {
-    "@eslint-community/eslint-plugin-eslint-comments": "^4.3.0",
-    "@eslint/js": "^9.5.0",
-    "@types/eslint-plugin-markdown": "^2.0.2",
+    "@eslint-community/eslint-plugin-eslint-comments": "4.3.0",
+    "@eslint/js": "9.5.0",
+    "@types/eslint-plugin-markdown": "2.0.2",
     "@types/jscodeshift": "0.12.0",
     "@types/node": "20.14.9",
-    "@vitest/coverage-v8": "^1.6.0",
-    "console-fail-test": "^0.2.3",
-    "cspell": "^8.9.1",
-    "eslint": "^9.5.0",
-    "eslint-plugin-jsdoc": "^48.5.0",
-    "eslint-plugin-jsonc": "^2.16.0",
-    "eslint-plugin-markdown": "^5.0.0",
-    "eslint-plugin-n": "^17.9.0",
-    "eslint-plugin-package-json": "^0.15.0",
-    "eslint-plugin-perfectionist": "^2.11.0",
-    "eslint-plugin-regexp": "^2.6.0",
-    "eslint-plugin-vitest": "^0.5.4",
-    "eslint-plugin-yml": "^1.14.0",
-    "husky": "^9.0.11",
+    "@vitest/coverage-v8": "1.6.0",
+    "console-fail-test": "0.2.3",
+    "cspell": "8.9.1",
+    "eslint": "9.5.0",
+    "eslint-plugin-jsdoc": "48.5.0",
+    "eslint-plugin-jsonc": "2.16.0",
+    "eslint-plugin-markdown": "5.0.0",
+    "eslint-plugin-n": "17.9.0",
+    "eslint-plugin-package-json": "0.15.0",
+    "eslint-plugin-perfectionist": "2.11.0",
+    "eslint-plugin-regexp": "2.6.0",
+    "eslint-plugin-vitest": "0.5.4",
+    "eslint-plugin-yml": "1.14.0",
+    "husky": "9.0.11",
     "jscodeshift": "17.0.0",
-    "jsonc-eslint-parser": "^2.4.0",
-    "knip": "^5.23.1",
-    "lint-staged": "^15.2.7",
-    "markdownlint": "^0.34.0",
-    "markdownlint-cli": "^0.41.0",
-    "prettier-plugin-curly": "^0.2.1",
-    "prettier-plugin-packagejson": "^2.5.0",
-    "prettier-plugin-sh": "^0.14.0",
-    "release-it": "^17.4.0",
-    "sentences-per-line": "^0.2.1",
-    "tsup": "^8.1.0",
-    "tsx": "^4.16.0",
-    "typescript": "^5.5.2",
-    "typescript-eslint": "^7.14.1",
-    "vitest": "^1.6.0"
+    "jsonc-eslint-parser": "2.4.0",
+    "knip": "5.23.1",
+    "lint-staged": "15.2.7",
+    "markdownlint": "0.34.0",
+    "markdownlint-cli": "0.41.0",
+    "prettier-plugin-curly": "0.2.1",
+    "prettier-plugin-packagejson": "2.5.0",
+    "prettier-plugin-sh": "0.14.0",
+    "release-it": "17.4.0",
+    "sentences-per-line": "0.2.1",
+    "tsup": "8.1.0",
+    "tsx": "4.16.0",
+    "typescript": "5.5.2",
+    "typescript-eslint": "7.14.1",
+    "vitest": "1.6.0"
   },
   "packageManager": "pnpm@9.10.0+sha512.73a29afa36a0d092ece5271de5177ecbf8318d454ecd701343131b8ebc0c1a91c487da46ab77c8e596d6acf1461e3594ced4becedf8921b074fbd8653ed7051c",
   "engines": {