Pin dependencies

pulumi · Dec 7, 2024 · 3604e32 · 3604e32
1 parent e511a49
commit 3604e32
Show file tree

Hide file tree

Showing 250 changed files with 475 additions and 475 deletions.
diff --git a/.devcontainer/aws/Dockerfile b/.devcontainer/aws/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/pulumi/devcontainer:extra
+FROM ghcr.io/pulumi/devcontainer:extra@sha256:e8534db8f45cfd886f74ce806ab71aaa7b5016a880570dc5d984dc56a0b106f4
 
 ##################################################################################
 # Install AWS CLI v2

diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
@@ -88,22 +88,22 @@ runs:
   using: composite
   steps:
     - name: Install .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4
       with:
         dotnet-version: ${{inputs.dotnet-version}}
 
     - name: Install Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         node-version: ${{inputs.node-version}}
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5
       with:
         python-version: ${{inputs.python-version}}
 
     - name: Install Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
       with:
         go-version: ${{inputs.go-version}}
         cache-dependency-path: "**/go.sum"
@@ -149,7 +149,7 @@ runs:
 
     - name: Authenticate with AWS
       id: aws-auth
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
       with:
         aws-access-key-id: ${{ inputs.aws-access-key-id }}
         aws-secret-access-key: ${{ inputs.aws-secret-access-key }}
@@ -161,13 +161,13 @@ runs:
         output-credentials: true
 
     - name: Authenticate with Google Cloud
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2
       with:
         service_account: ${{ inputs.google-service-account-email }}
         workload_identity_provider: projects/${{ inputs.google-project-number }}/locations/global/workloadIdentityPools/${{ inputs.google-workload-identity-pool }}/providers/${{ inputs.google-workload-identity-provider }}
 
     - name: Install gcloud auth
-      uses: google-github-actions/setup-gcloud@v2
+      uses: google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a # v2
       with:
         install_components: gke-gcloud-auth-plugin
 

diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Add to DevRel
-        uses: actions/[email protected]
+        uses: actions/add-to-project@960fbad431afda394cfcf8743445e741acd19e85 # v0.4.0
         with:
           project-url: https://github.com/orgs/pulumi/projects/47
           github-token: ${{ secrets.PULUMI_BOT_GHA_MARKETING }}
diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml
@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Run Build
-      uses: peter-evans/slash-command-dispatch@v2
+      uses: peter-evans/slash-command-dispatch@40877f718dce0101edfc7aea2b3800cc192f9ed5 # v2
       with:
         commands: run-tests
         issue-type: pull-request

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -8,9 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Comment PR
-      uses: thollander/actions-comment-pull-request@v1
+      uses: thollander/actions-comment-pull-request@8a3fad13c20088e9eb0805666b9fe49509d2fec8 # v1
       with:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         message: >

diff --git a/.github/workflows/test-examples.yml b/.github/workflows/test-examples.yml
@@ -18,7 +18,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -40,7 +40,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -64,7 +64,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -88,7 +88,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -110,7 +110,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -142,7 +142,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -203,7 +203,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup

diff --git a/alicloud-ts-ecs/package.json b/alicloud-ts-ecs/package.json
@@ -1,7 +1,7 @@
 {
     "name": "alicloud-ts-ecs",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/alicloud": "3.68.0",

diff --git a/aws-apigateway-ts-routes/package.json b/aws-apigateway-ts-routes/package.json
@@ -1,13 +1,13 @@
 {
     "name": "typescript",
     "devDependencies": {
-        "@types/aws-lambda": "^8.10.85",
-        "@types/node": "^8.0.0"
+        "@types/aws-lambda": "8.10.146",
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/pulumi": "3.142.0",
-        "aws-lambda": "^1.0.7"
+        "aws-lambda": "1.0.7"
     }
 }
diff --git a/aws-cs-fargate/App/Dockerfile b/aws-cs-fargate/App/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/core/sdk:3.1 AS build
+FROM mcr.microsoft.com/dotnet/core/sdk:3.1@sha256:150d074697d1cda38a0c2185fe43895d84b5745841e9d15c5adba29604a6e4cb AS build
 WORKDIR /app/src
 
 # First restore dependencies so app changes are faster.
@@ -10,7 +10,7 @@ COPY * ./
 RUN dotnet publish -c release -o /app/bin --no-restore
 
 # Create a new, smaller image stage, that just runs the DLL.
-FROM mcr.microsoft.com/dotnet/core/aspnet:3.1
+FROM mcr.microsoft.com/dotnet/core/aspnet:3.1@sha256:e3b773f30a0a6e88d71ce52429f6847627fc9353e491346902ca345760b82bdd
 WORKDIR /app
 COPY --from=build /app/bin ./
 ENTRYPOINT [ "dotnet", "aws-cs-fargate.dll" ]
diff --git a/aws-cs-langserve/Dockerfile b/aws-cs-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 

diff --git a/aws-cs-langserve/poetry.lock b/aws-cs-langserve/poetry.lock
diff --git a/aws-cs-langserve/pyproject.toml b/aws-cs-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
 pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]

diff --git a/aws-go-fargate/app/Dockerfile b/aws-go-fargate/app/Dockerfile
@@ -1,6 +1,6 @@
 # Start from a Debian image with the latest version of Go installed
 # and a workspace (GOPATH) configured at /go.
-FROM golang
+FROM golang@sha256:574185e5c6b9d09873f455a7c205ea0514bfd99738c5dc7750196403a44ed4b7
 
 # Copy the local package files to the container's workspace.
 ADD . /go/src/foo

diff --git a/aws-go-langserve/Dockerfile b/aws-go-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 

diff --git a/aws-go-langserve/poetry.lock b/aws-go-langserve/poetry.lock
diff --git a/aws-go-langserve/pyproject.toml b/aws-go-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
 pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]

diff --git a/aws-js-containers/app/Dockerfile b/aws-js-containers/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/aws-js-langserve/Dockerfile b/aws-js-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 

diff --git a/aws-js-langserve/poetry.lock b/aws-js-langserve/poetry.lock
diff --git a/aws-js-langserve/pyproject.toml b/aws-js-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
 pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]

diff --git a/aws-js-s3-folder-component/package.json b/aws-js-s3-folder-component/package.json
@@ -4,6 +4,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.2.2"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-js-s3-folder/package.json b/aws-js-s3-folder/package.json
@@ -4,6 +4,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.2.2"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-js-sqs-slack/package.json b/aws-js-sqs-slack/package.json
@@ -3,6 +3,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "@slack/client": "^4.3.1"
+        "@slack/client": "4.12.0"
     }
 }
diff --git a/aws-py-django-voting-app/frontend/Dockerfile b/aws-py-django-voting-app/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 

diff --git a/aws-py-ecs-instances-autoapi/automation/package.json b/aws-py-ecs-instances-autoapi/automation/package.json
@@ -8,9 +8,9 @@
   "dependencies": {
     "@pulumi/aws": "6.64.0",
     "@pulumi/pulumi": "3.142.0",
-    "@types/node": "^14.14.20",
-    "ts-node": "^9.0.0",
-    "upath": "^2.0.0"
+    "@types/node": "14.18.63",
+    "ts-node": "9.1.1",
+    "upath": "2.0.1"
   },
   "scripts": {
     "start": "./node_modules/ts-node/dist/bin.js index.ts"

diff --git a/aws-py-fargate/pyproject.toml b/aws-py-fargate/pyproject.toml
@@ -2,10 +2,10 @@
 package-mode = false
 
 [tool.poetry.dependencies]
-python = "^3.10"
+python = "3.13.1"
 pulumi = "==3.142.0"
-pulumi-aws = ">=6.42.1,<7.0.0"
-pyright = ">=1.1.369,<2.0.0"
+pulumi-aws = "==6.64.0"
+pyright = "==1.1.390"
 
 [build-system]
 requires = ["poetry-core"]

diff --git a/aws-py-langserve/Dockerfile b/aws-py-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 

diff --git a/aws-py-langserve/poetry.lock b/aws-py-langserve/poetry.lock
diff --git a/aws-py-langserve/pyproject.toml b/aws-py-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
 pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+openai = "1.10.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]

diff --git a/aws-py-voting-app/frontend/Dockerfile b/aws-py-voting-app/frontend/Dockerfile
@@ -1,3 +1,3 @@
-FROM tiangolo/uwsgi-nginx-flask:python3.6
+FROM tiangolo/uwsgi-nginx-flask:python3.6@sha256:07b3a61dc2f6d6b294065f929d33cdf6416133320cf61cc66b7cdb1428460e75
 RUN  pip install redis
 COPY /app /app