chore(deps): pin dependencies (#1939)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[@prettier/sync](https://redirect.github.com/prettier/prettier-synchronized)
| devDependencies | pin | [`^0.5.2` ->
`0.5.3`](https://renovatebot.com/diffs/npm/@prettier%2fsync/0.5.3/0.5.3)
|
|
[@types/semver](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/semver)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver))
| devDependencies | pin | [`^7.5.8` ->
`7.5.8`](https://renovatebot.com/diffs/npm/@types%2fsemver/7.5.8/7.5.8)
|
|
[JoshuaKGoldberg/all-contributors-auto-action](https://redirect.github.com/JoshuaKGoldberg/all-contributors-auto-action)
| action | pinDigest | -> `944abe4` |
|
[actions-ecosystem/action-remove-labels](https://redirect.github.com/actions-ecosystem/action-remove-labels)
| action | pinDigest | -> `2ce5d41` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | pinDigest | -> `11bd719` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | pinDigest | -> `cdca736` |
|
[apexskier/github-release-commenter](https://redirect.github.com/apexskier/github-release-commenter)
| action | pinDigest | -> `3bd413a` |
|
[bingo-requests](https://www.create.bingo/build/packages/bingo-requests)
([source](https://redirect.github.com/JoshuaKGoldberg/bingo/tree/HEAD/packages/bingo-requests))
| devDependencies | pin | [`^0.5.4` ->
`0.5.4`](https://renovatebot.com/diffs/npm/bingo-requests/0.5.4/0.5.4) |
| [bingo-testers](https://www.create.bingo/build/packages/bingo-testers)
([source](https://redirect.github.com/JoshuaKGoldberg/bingo/tree/HEAD/packages/bingo-testers))
| devDependencies | pin | [`^0.5.6` ->
`0.5.6`](https://renovatebot.com/diffs/npm/bingo-testers/0.5.6/0.5.6) |
|
[github/accessibility-alt-text-bot](https://redirect.github.com/github/accessibility-alt-text-bot)
| action | pinDigest | -> `602a5ef` |
| [lodash](https://lodash.com/)
([source](https://redirect.github.com/lodash/lodash)) | devDependencies
| pin | [`^4.17.21` ->
`4.17.21`](https://renovatebot.com/diffs/npm/lodash/4.17.21/4.17.21) |
| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) |
action | pinDigest | -> `a7487c7` |
| [prettier](https://prettier.io)
([source](https://redirect.github.com/prettier/prettier)) |
devDependencies | pin | [`^3.5.3` ->
`3.5.3`](https://renovatebot.com/diffs/npm/prettier/3.5.3/3.5.3) |

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/JoshuaKGoldberg/create-typescript-app).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjcuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Josh Goldberg <[email protected]>

Author: renovate[bot]

.github/actions/prepare/action.yml

@@ -4,8 +4,8 @@ name: Prepare
 
 runs:
   steps:
-    - uses: pnpm/action-setup@v4
-    - uses: actions/setup-node@v4
+    - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
+    - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
       with:
         cache: pnpm
         node-version: "20"

.github/workflows/accessibility-alt-text-bot.yml

@@ -3,7 +3,7 @@ jobs:
     if: ${{ !endsWith(github.actor, '[bot]') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: github/[email protected]
+      - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0
 
 name: Accessibility Alt Text Bot
 

.github/workflows/ci.yml

@@ -3,66 +3,66 @@ jobs:
     name: Are The Types Wrong?
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: npx --yes @arethetypeswrong/cli --pack . --ignore-rules cjs-resolves-to-esm
   build:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: node lib/index.js --version
   lint:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm build
       - run: pnpm lint
   lint_knip:
     name: Lint Knip
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:knip
   lint_markdown:
     name: Lint Markdown
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:md
   lint_packages:
     name: Lint Packages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:packages
   lint_spelling:
     name: Lint Spelling
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm lint:spelling
   prettier:
     name: Prettier
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm format --list-different
   test:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm run test --coverage
       - env:
@@ -73,7 +73,7 @@ jobs:
     name: Type Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/prepare
       - run: pnpm tsc
 

.github/workflows/contributors.yml

@@ -2,13 +2,13 @@ jobs:
   contributors:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - uses: ./.github/actions/prepare
       - env:
           GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
-        uses: JoshuaKGoldberg/[email protected]
+        uses: JoshuaKGoldberg/all-contributors-auto-action@944abe4387e751b5bbb38616cb25cf4a4ca998f2 # v0.5.0
 
 name: Contributors
 

.github/workflows/post-release.yml

@@ -2,11 +2,11 @@ jobs:
   post_release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV"
-      - uses: apexskier/github-release-commenter@v1
+      - uses: apexskier/github-release-commenter@3bd413ad5e1d603bfe2282f9f06f2bdcec079327 # v1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           comment-template: |

.github/workflows/pr-review-requested.yml

@@ -2,7 +2,7 @@ jobs:
   pr_review_requested:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1
         with:
           labels: "status: waiting for author"
       - if: failure()

.github/workflows/release.yml

@@ -5,7 +5,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
           ref: main

package.json

@@ -71,7 +71,7 @@
 	"devDependencies": {
 		"@eslint-community/eslint-plugin-eslint-comments": "4.4.1",
 		"@eslint/js": "9.22.0",
-		"@prettier/sync": "^0.5.2",
+		"@prettier/sync": "0.5.3",
 		"@release-it/conventional-changelog": "10.0.0",
 		"@types/eslint-plugin-markdown": "2.0.2",
 		"@types/git-url-parse": "9.0.3",
@@ -80,13 +80,13 @@
 		"@types/lodash": "4.17.16",
 		"@types/node": "22.13.10",
 		"@types/parse-author": "2.0.3",
-		"@types/semver": "^7.5.8",
+		"@types/semver": "7.5.8",
 		"@vitest/coverage-v8": "3.0.9",
 		"@vitest/eslint-plugin": "1.1.38",
 		"all-contributors-cli": "6.26.1",
-		"bingo-requests": "^0.5.4",
+		"bingo-requests": "0.5.4",
 		"bingo-stratum-testers": "0.5.6",
-		"bingo-testers": "^0.5.6",
+		"bingo-testers": "0.5.6",
 		"console-fail-test": "0.5.0",
 		"cspell": "8.17.5",
 		"eslint": "9.22.0",
@@ -101,10 +101,10 @@
 		"husky": "9.1.7",
 		"knip": "5.46.0",
 		"lint-staged": "15.5.0",
-		"lodash": "^4.17.21",
+		"lodash": "4.17.21",
 		"markdownlint": "0.37.4",
 		"markdownlint-cli": "0.44.0",
-		"prettier": "^3.5.3",
+		"prettier": "3.5.3",
 		"prettier-plugin-curly": "0.3.1",
 		"prettier-plugin-packagejson": "2.5.10",
 		"prettier-plugin-sh": "0.15.0",

pnpm-lock.yaml

@@ -65,7 +65,7 @@ describe("blockPrettier", () => {
 			          "devDependencies": {
 			            "husky": "9.1.7",
 			            "lint-staged": "15.5.0",
-			            "prettier": "^3.5.3",
+			            "prettier": "3.5.3",
 			          },
 			          "lint-staged": {
 			            "*": "prettier --ignore-unknown --write",
@@ -181,7 +181,7 @@ describe("blockPrettier", () => {
 			          "devDependencies": {
 			            "husky": "9.1.7",
 			            "lint-staged": "15.5.0",
-			            "prettier": "^3.5.3",
+			            "prettier": "3.5.3",
 			          },
 			          "lint-staged": {
 			            "*": "prettier --ignore-unknown --write",
@@ -314,7 +314,7 @@ describe("blockPrettier", () => {
 			          "devDependencies": {
 			            "husky": "9.1.7",
 			            "lint-staged": "15.5.0",
-			            "prettier": "^3.5.3",
+			            "prettier": "3.5.3",
 			            "prettier-plugin-curly": "0.3.1",
 			            "prettier-plugin-packagejson": "2.5.10",
 			            "prettier-plugin-sh": "0.15.0",