From cc70e2a8f77e29d4d9f3fe99b09f5e7ad436f3fe Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 06:38:17 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/publish.yml | 4 ++--
 .github/workflows/test.yml    | 4 ++--
 Dockerfile.vr                 | 2 +-
 package.json                  | 4 ++--
 yarn.lock                     | 8 ++++----
 5 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a9b19b92..bfb55b01 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,13 +18,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           fetch-depth: 0
       - name: Enable Corepack
         run: corepack enable
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c8c6f059..51be220f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     container:
-      image: mcr.microsoft.com/playwright:v1.58.2-noble
+      image: mcr.microsoft.com/playwright:v1.58.2-noble@sha256:6446946a1d9fd62d9ae501312a2d76a43ee688542b21622056a372959b65d63d
 
     steps:
       - name: Checkout code
@@ -56,7 +56,7 @@ jobs:
 
       - name: Upload VR diff images on failure
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: vr-diff-images
           path: packages/@burger-editor/client/src/__tests__/vr/__snapshots__/**/*-diff.png
diff --git a/Dockerfile.vr b/Dockerfile.vr
index 71a8fa57..9b44a25f 100644
--- a/Dockerfile.vr
+++ b/Dockerfile.vr
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/playwright:v1.58.2-noble
+FROM mcr.microsoft.com/playwright:v1.58.2-noble@sha256:6446946a1d9fd62d9ae501312a2d76a43ee688542b21622056a372959b65d63d
 
 ARG NODE_VERSION
 
diff --git a/package.json b/package.json
index 674948bb..254bceb3 100644
--- a/package.json
+++ b/package.json
@@ -68,9 +68,9 @@
 		"jsdom": "28.1.0",
 		"lerna": "9.0.7",
 		"npm-run-all2": "8.0.4",
-		"pixelmatch": "^7.1.0",
+		"pixelmatch": "7.1.0",
 		"playwright": "1.58.2",
-		"pngjs": "^7.0.0",
+		"pngjs": "7.0.0",
 		"postcss-html": "1.8.1",
 		"prettier-plugin-svelte": "3.5.2",
 		"stylelint-config-html": "1.1.0",
diff --git a/yarn.lock b/yarn.lock
index e2a00f12..f748cb07 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -13255,7 +13255,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"pixelmatch@npm:7.1.0, pixelmatch@npm:^7.1.0":
+"pixelmatch@npm:7.1.0":
   version: 7.1.0
   resolution: "pixelmatch@npm:7.1.0"
   dependencies:
@@ -13342,7 +13342,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"pngjs@npm:^7.0.0":
+"pngjs@npm:7.0.0, pngjs@npm:^7.0.0":
   version: 7.0.0
   resolution: "pngjs@npm:7.0.0"
   checksum: 10c0/0d4c7a0fd476a9c33df7d0a2a73e1d56537628a668841f6995c2bca070cf30819f9254a64363266bc14ef2fee47659dd3b4f2b18eec7ab65143015139f497b38
@@ -14606,9 +14606,9 @@ __metadata:
     jsdom: "npm:28.1.0"
     lerna: "npm:9.0.7"
     npm-run-all2: "npm:8.0.4"
-    pixelmatch: "npm:^7.1.0"
+    pixelmatch: "npm:7.1.0"
     playwright: "npm:1.58.2"
-    pngjs: "npm:^7.0.0"
+    pngjs: "npm:7.0.0"
     postcss-html: "npm:1.8.1"
     prettier-plugin-svelte: "npm:3.5.2"
     stylelint-config-html: "npm:1.1.0"