Merge pull request #3 from palashmon/renovate/pin-dependencies

chore(deps): pin dependencies

.github/workflows/main.yml

@@ -10,9 +10,9 @@ jobs:
         node-version: ['lts/*', 'current']
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Setup Node.js (${{ matrix.node-version }})
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm install

.github/workflows/npm-publish.yml

@@ -6,8 +6,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: "20.x"
       - run: npm i
@@ -17,8 +17,8 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: "20.x"
           registry-url: "https://registry.npmjs.org"

.github/workflows/stale.yml

@@ -9,7 +9,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           days-before-stale: 365

package.json

@@ -47,7 +47,7 @@
 		"utility"
 	],
 	"devDependencies": {
-		"ava": "^6.0.0",
-		"xo": "^0.58.0"
+		"ava": "6.1.2",
+		"xo": "0.58.0"
 	}
 }