chore(deps): pin dependencies (#1606)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[@eslint-community/eslint-plugin-eslint-comments](https://redirect.github.com/eslint-community/eslint-plugin-eslint-comments)
| devDependencies | pin | [`^4.4.0` ->
`4.4.0`](https://renovatebot.com/diffs/npm/@eslint-community%2feslint-plugin-eslint-comments/4.4.0/4.4.0)
|
| [@eslint/js](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js))
| devDependencies | pin | [`^9.9.0` ->
`9.9.0`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.9.0/9.9.0) |
|
[@octokit/request-error](https://redirect.github.com/octokit/request-error.js)
| devDependencies | pin | [`^6.1.4` ->
`6.1.4`](https://renovatebot.com/diffs/npm/@octokit%2frequest-error/6.1.4/6.1.4)
|
|
[@release-it/conventional-changelog](https://redirect.github.com/release-it/conventional-changelog)
| devDependencies | pin | [`^9.0.0` ->
`9.0.0`](https://renovatebot.com/diffs/npm/@release-it%2fconventional-changelog/9.0.0/9.0.0)
|
|
[@types/eslint-plugin-markdown](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/eslint-plugin-markdown)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/eslint-plugin-markdown))
| devDependencies | pin | [`^2.0.2` ->
`2.0.2`](https://renovatebot.com/diffs/npm/@types%2feslint-plugin-markdown/2.0.2/2.0.2)
|
|
[@types/eslint__js](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/eslint__js)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/eslint__js))
| devDependencies | pin | [`^8.42.3` ->
`8.42.3`](https://renovatebot.com/diffs/npm/@types%2feslint__js/8.42.3/8.42.3)
|
|
[@types/git-url-parse](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/git-url-parse)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/git-url-parse))
| devDependencies | pin | [`^9.0.3` ->
`9.0.3`](https://renovatebot.com/diffs/npm/@types%2fgit-url-parse/9.0.3/9.0.3)
|
|
[@types/js-yaml](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/js-yaml)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/js-yaml))
| devDependencies | pin | [`^4.0.9` ->
`4.0.9`](https://renovatebot.com/diffs/npm/@types%2fjs-yaml/4.0.9/4.0.9)
|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| devDependencies | pin | [`^22.3.0` ->
`22.3.0`](https://renovatebot.com/diffs/npm/@types%2fnode/22.3.0/22.3.0)
|
|
[@types/parse-author](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/parse-author)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/parse-author))
| devDependencies | pin | [`^2.0.3` ->
`2.0.3`](https://renovatebot.com/diffs/npm/@types%2fparse-author/2.0.3/2.0.3)
|
|
[@vitest/coverage-v8](https://redirect.github.com/vitest-dev/vitest/tree/main/packages/coverage-v8#readme)
([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8))
| devDependencies | pin | [`^2.1.0` ->
`2.1.1`](https://renovatebot.com/diffs/npm/@vitest%2fcoverage-v8/2.1.1/2.1.1)
|
|
[@vitest/eslint-plugin](https://redirect.github.com/vitest-dev/eslint-plugin-vitest)
| devDependencies | pin | [`^1.1.0` ->
`1.1.0`](https://renovatebot.com/diffs/npm/@vitest%2feslint-plugin/1.1.0/1.1.0)
|
|
[JoshuaKGoldberg/all-contributors-auto-action](https://redirect.github.com/JoshuaKGoldberg/all-contributors-auto-action)
| action | pinDigest | -> `944abe4` |
|
[JoshuaKGoldberg/release-it-action](https://redirect.github.com/JoshuaKGoldberg/release-it-action)
| action | pinDigest | -> `77373cf` |
|
[actions-ecosystem/action-remove-labels](https://redirect.github.com/actions-ecosystem/action-remove-labels)
| action | pinDigest | -> `2ce5d41` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | pinDigest | -> `11bd719` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | pinDigest | -> `39370e3` |
|
[apexskier/github-release-commenter](https://redirect.github.com/apexskier/github-release-commenter)
| action | pinDigest | -> `3bd413a` |
| [c8](https://redirect.github.com/bcoe/c8) | devDependencies | pin |
[`^10.1.2` ->
`10.1.2`](https://renovatebot.com/diffs/npm/c8/10.1.2/10.1.2) |
|
[console-fail-test](https://redirect.github.com/JoshuaKGoldberg/console-fail-test)
| devDependencies | pin | [`^0.5.0` ->
`0.5.0`](https://renovatebot.com/diffs/npm/console-fail-test/0.5.0/0.5.0)
|
| [cspell](https://cspell.org/)
([source](https://redirect.github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell))
| devDependencies | pin | [`^8.14.2` ->
`8.14.2`](https://renovatebot.com/diffs/npm/cspell/8.14.2/8.14.2) |
| [eslint](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint)) | devDependencies
| pin | [`^9.9.0` ->
`9.9.0`](https://renovatebot.com/diffs/npm/eslint/9.9.0/9.9.0) |
|
[eslint-plugin-jsdoc](https://redirect.github.com/gajus/eslint-plugin-jsdoc)
| devDependencies | pin | [`^50.6.0` ->
`50.6.0`](https://renovatebot.com/diffs/npm/eslint-plugin-jsdoc/50.6.0/50.6.0)
|
|
[eslint-plugin-jsonc](https://ota-meshi.github.io/eslint-plugin-jsonc/)
([source](https://redirect.github.com/ota-meshi/eslint-plugin-jsonc)) |
devDependencies | pin | [`^2.16.0` ->
`2.16.0`](https://renovatebot.com/diffs/npm/eslint-plugin-jsonc/2.16.0/2.16.0)
|
|
[eslint-plugin-markdown](https://redirect.github.com/eslint/eslint-plugin-markdown)
| devDependencies | pin | [`^5.1.0` ->
`5.1.0`](https://renovatebot.com/diffs/npm/eslint-plugin-markdown/5.1.0/5.1.0)
|
|
[eslint-plugin-n](https://redirect.github.com/eslint-community/eslint-plugin-n)
| devDependencies | pin | [`^17.12.0` ->
`17.12.0`](https://renovatebot.com/diffs/npm/eslint-plugin-n/17.12.0/17.12.0)
|
|
[eslint-plugin-package-json](https://redirect.github.com/JoshuaKGoldberg/eslint-plugin-package-json)
| devDependencies | pin | [`^0.15.2` ->
`0.15.2`](https://renovatebot.com/diffs/npm/eslint-plugin-package-json/0.15.2/0.15.2)
|
| [eslint-plugin-perfectionist](https://perfectionist.dev)
([source](https://redirect.github.com/azat-io/eslint-plugin-perfectionist))
| devDependencies | pin | [`^3.2.0` ->
`3.2.0`](https://renovatebot.com/diffs/npm/eslint-plugin-perfectionist/3.2.0/3.2.0)
|
|
[eslint-plugin-regexp](https://redirect.github.com/ota-meshi/eslint-plugin-regexp)
| devDependencies | pin | [`^2.6.0` ->
`2.6.0`](https://renovatebot.com/diffs/npm/eslint-plugin-regexp/2.6.0/2.6.0)
|
| [eslint-plugin-yml](https://ota-meshi.github.io/eslint-plugin-yml/)
([source](https://redirect.github.com/ota-meshi/eslint-plugin-yml)) |
devDependencies | pin | [`^1.14.0` ->
`1.14.0`](https://renovatebot.com/diffs/npm/eslint-plugin-yml/1.14.0/1.14.0)
|
|
[github/accessibility-alt-text-bot](https://redirect.github.com/github/accessibility-alt-text-bot)
| action | pinDigest | -> `602a5ef` |
| [globby](https://redirect.github.com/sindresorhus/globby) |
devDependencies | pin | [`^14.0.2` ->
`14.0.2`](https://renovatebot.com/diffs/npm/globby/14.0.2/14.0.2) |
| [husky](https://redirect.github.com/typicode/husky) | devDependencies
| pin | [`^9.1.4` ->
`9.1.4`](https://renovatebot.com/diffs/npm/husky/9.1.4/9.1.4) |
|
[jsonc-eslint-parser](https://redirect.github.com/ota-meshi/jsonc-eslint-parser)
| devDependencies | pin | [`^2.4.0` ->
`2.4.0`](https://renovatebot.com/diffs/npm/jsonc-eslint-parser/2.4.0/2.4.0)
|
| [lint-staged](https://redirect.github.com/lint-staged/lint-staged) |
devDependencies | pin | [`^15.2.9` ->
`15.2.9`](https://renovatebot.com/diffs/npm/lint-staged/15.2.9/15.2.9) |
| [markdownlint](https://redirect.github.com/DavidAnson/markdownlint) |
devDependencies | pin | [`^0.36.0` ->
`0.36.1`](https://renovatebot.com/diffs/npm/markdownlint/0.36.1/0.36.1)
|
|
[markdownlint-cli](https://redirect.github.com/igorshubovych/markdownlint-cli)
| devDependencies | pin | [`^0.42.0` ->
`0.42.0`](https://renovatebot.com/diffs/npm/markdownlint-cli/0.42.0/0.42.0)
|
|
[prettier-plugin-curly](https://redirect.github.com/JoshuaKGoldberg/prettier-plugin-curly)
| devDependencies | pin | [`^0.3.0` ->
`0.3.1`](https://renovatebot.com/diffs/npm/prettier-plugin-curly/0.3.1/0.3.1)
|
|
[prettier-plugin-packagejson](https://redirect.github.com/matzkoh/prettier-plugin-packagejson)
| devDependencies | pin | [`^2.5.1` ->
`2.5.1`](https://renovatebot.com/diffs/npm/prettier-plugin-packagejson/2.5.1/2.5.1)
|
|
[prettier-plugin-sh](https://redirect.github.com/un-ts/prettier/tree/master/packages/sh)
([source](https://redirect.github.com/un-ts/prettier)) | devDependencies
| pin | [`^0.14.0` ->
`0.14.0`](https://renovatebot.com/diffs/npm/prettier-plugin-sh/0.14.0/0.14.0)
|
| [release-it](https://redirect.github.com/release-it/release-it) |
devDependencies | pin | [`^17.6.0` ->
`17.6.0`](https://renovatebot.com/diffs/npm/release-it/17.6.0/17.6.0) |
|
[sentences-per-line](https://redirect.github.com/JoshuaKGoldberg/one-sentence-per-line)
| devDependencies | pin | [`^0.2.1` ->
`0.2.1`](https://renovatebot.com/diffs/npm/sentences-per-line/0.2.1/0.2.1)
|
| [tsup](https://tsup.egoist.dev/)
([source](https://redirect.github.com/egoist/tsup)) | devDependencies |
pin | [`^8.3.0` ->
`8.3.0`](https://renovatebot.com/diffs/npm/tsup/8.3.0/8.3.0) |
| [tsx](https://tsx.is)
([source](https://redirect.github.com/privatenumber/tsx)) |
devDependencies | pin | [`^4.17.0` ->
`4.17.0`](https://renovatebot.com/diffs/npm/tsx/4.17.0/4.17.0) |
| [typescript](https://www.typescriptlang.org/)
([source](https://redirect.github.com/microsoft/TypeScript)) |
devDependencies | pin | [`^5.6.2` ->
`5.6.2`](https://renovatebot.com/diffs/npm/typescript/5.6.2/5.6.2) |
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| devDependencies | pin | [`^8.15.0` ->
`8.15.0`](https://renovatebot.com/diffs/npm/typescript-eslint/8.15.0/8.15.0)
|
| [vitest](https://redirect.github.com/vitest-dev/vitest)
([source](https://redirect.github.com/vitest-dev/vitest/tree/HEAD/packages/vitest))
| devDependencies | pin | [`^2.1.0` ->
`2.1.1`](https://renovatebot.com/diffs/npm/vitest/2.1.1/2.1.1) |

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/JoshuaKGoldberg/create-typescript-app).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xOC4xNyIsInVwZGF0ZWRJblZlciI6IjM5LjE5LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/actions/prepare/action.yml

@@ -7,7 +7,7 @@ runs:
     - uses: pnpm/action-setup@v4
       with:
         version: 9
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         cache: pnpm
         node-version: "20"

.github/workflows/accessibility-alt-text-bot.yml

@@ -3,7 +3,7 @@ jobs:
     if: ${{ !endsWith(github.actor, '[bot]') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: github/[email protected]
+      - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0
 
 name: Accessibility Alt Text Bot
 

.github/workflows/ci.yml

@@ -3,66 +3,66 @@ jobs:
     name: Are the types wrong?
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: npx --yes @arethetypeswrong/cli --pack . --ignore-rules cjs-resolves-to-esm
   build:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: node ./lib/index.js
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: pnpm lint
   lint_knip:
     name: Lint Knip
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:knip
   lint_markdown:
     name: Lint Markdown
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:md
   lint_packages:
     name: Lint Packages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:packages
   lint_spelling:
     name: Lint Spelling
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:spelling
   prettier:
     name: Prettier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm format --list-different
   test:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run test --coverage
       - uses: codecov/codecov-action@v3
@@ -72,7 +72,7 @@ jobs:
     name: Type Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm tsc
 

.github/workflows/contributors.yml

@@ -2,13 +2,13 @@ jobs:
   contributors:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - uses: ./.github/actions/prepare
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
-        uses: JoshuaKGoldberg/[email protected]
+        uses: JoshuaKGoldberg/all-contributors-auto-action@944abe4387e751b5bbb38616cb25cf4a4ca998f2 # v0.5.0
 
 name: Contributors
 

.github/workflows/post-release.yml

@@ -2,11 +2,11 @@ jobs:
   post_release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV"
-      - uses: apexskier/github-release-commenter@v1
+      - uses: apexskier/github-release-commenter@3bd413ad5e1d603bfe2282f9f06f2bdcec079327 # v1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           comment-template: |

.github/workflows/pr-review-requested.yml

@@ -2,7 +2,7 @@ jobs:
   pr_review_requested:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1
         with:
           labels: "status: waiting for author"
       - if: failure()

.github/workflows/release.yml

@@ -5,7 +5,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
           ref: main
@@ -14,7 +14,7 @@ jobs:
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        uses: JoshuaKGoldberg/[email protected]
+        uses: JoshuaKGoldberg/release-it-action@77373cfc2535e21149518381cb09e1c04c6068fe # v0.2.2
 
 name: Release
 

.github/workflows/test-create.yml

@@ -2,7 +2,7 @@ jobs:
   create:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run build
       - run: pnpm run test:create

.github/workflows/test-initialize.yml

@@ -2,7 +2,7 @@ jobs:
   initialize:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run build
       - run: pnpm run test:initialize

.github/workflows/test-migrate.yml

@@ -2,7 +2,7 @@ jobs:
   migrate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run build
       - run: pnpm run test:migrate