chore(deps): pin dependencies

.github/workflows/issue_commands.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Actions
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: 'grafana/grafana-github-actions'
           path: ./actions
@@ -29,7 +29,7 @@ jobs:
             AWS_DS_TOKEN_CREATOR_PEM=aws-ds-token-creator:pem
       - name: 'Generate token'
         id: generate_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2
         with:
           app-id: ${{ env.AWS_DS_TOKEN_CREATOR_ID }}
           private-key: ${{ env.AWS_DS_TOKEN_CREATOR_PEM }}

.github/workflows/publish-npm.yml

@@ -22,7 +22,7 @@ jobs:
       version_changed: ${{ steps.version_check.outputs.changed }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: main
           persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
 
       - name: Setup .npmrc file for NPM registry
         if: steps.version_check.outputs.changed == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://registry.npmjs.org'
@@ -66,7 +66,7 @@ jobs:
 
       - name: Setup .npmrc file for GitHub Packages
         if: steps.version_check.outputs.changed == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://npm.pkg.github.com'
@@ -86,12 +86,12 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           persist-credentials: false
 
       - name: Create Release Notes
-        uses: actions/[email protected]
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           TAG_NAME: 'v${{ needs.npm-publish.outputs.new_version }}'
         with:

.github/workflows/push.yaml

@@ -15,12 +15,12 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           persist-credentials: false
 
       - name: Setup environment
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version-file: '.nvmrc'
 

.github/workflows/stale.yml

@@ -11,7 +11,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # start from the oldest issues when performing stale operations

package.json

@@ -34,51 +34,51 @@
     "@grafana/plugin-ui": "^0.11.0"
   },
   "devDependencies": {
-    "@eslint/eslintrc": "^3.1.0",
-    "@eslint/js": "^9.13.0",
+    "@eslint/eslintrc": "3.3.1",
+    "@eslint/js": "9.38.0",
     "@grafana/data": "12.2.1",
-    "@grafana/eslint-config": "^8.0.0",
+    "@grafana/eslint-config": "8.2.0",
     "@grafana/runtime": "12.2.1",
-    "@grafana/tsconfig": "^2.0.0",
+    "@grafana/tsconfig": "2.0.1",
     "@grafana/ui": "12.2.1",
-    "@rollup/plugin-node-resolve": "^16.0.0",
-    "@stylistic/eslint-plugin-ts": "^4.2.0",
-    "@swc/core": "^1.7.28",
-    "@swc/jest": "^0.2.36",
+    "@rollup/plugin-node-resolve": "16.0.3",
+    "@stylistic/eslint-plugin-ts": "4.4.1",
+    "@swc/core": "1.13.21",
+    "@swc/jest": "0.2.39",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.0",
     "@testing-library/react-hooks": "8.0.1",
-    "@testing-library/user-event": "^14.5.2",
+    "@testing-library/user-event": "14.6.1",
     "@types/jest": "30.0.0",
     "@types/lodash": "4.17.20",
     "@types/node": "22.18.13",
     "@types/react": "18.3.12",
     "@types/react-dom": "18.3.1",
-    "@typescript-eslint/eslint-plugin": "^8.12.2",
-    "@typescript-eslint/parser": "^8.12.2",
+    "@typescript-eslint/eslint-plugin": "8.46.2",
+    "@typescript-eslint/parser": "8.46.2",
     "cspell": "9.2.2",
-    "esbuild": "^0.25.0",
-    "eslint": "^9.13.0",
-    "eslint-config-prettier": "^10.0.1",
-    "eslint-plugin-deprecation": "^3.0.0",
-    "eslint-plugin-jsdoc": "^60.1.1",
-    "eslint-plugin-react": "^7.37.2",
-    "eslint-plugin-react-hooks": "^5.0.0",
-    "identity-obj-proxy": "^3.0.0",
+    "esbuild": "0.25.11",
+    "eslint": "9.38.0",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-plugin-deprecation": "3.0.0",
+    "eslint-plugin-jsdoc": "60.8.3",
+    "eslint-plugin-react": "7.37.5",
+    "eslint-plugin-react-hooks": "5.2.0",
+    "identity-obj-proxy": "3.0.0",
     "jest": "30.2.0",
-    "jest-environment-jsdom": "^30.0.0",
-    "lefthook": "^1.9.2",
-    "node-notifier": "^10.0.1",
-    "prettier": "^3.4.2",
+    "jest-environment-jsdom": "30.2.0",
+    "lefthook": "1.13.6",
+    "node-notifier": "10.0.1",
+    "prettier": "3.6.2",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-select-event": "^5.5.1",
-    "rimraf": "^6.0.1",
+    "react-select-event": "5.5.1",
+    "rimraf": "6.0.1",
     "rollup": "4.52.5",
-    "rollup-plugin-dts": "^6.1.1",
-    "rollup-plugin-esbuild": "^6.1.1",
-    "rollup-plugin-node-externals": "^8.0.0",
-    "typescript": "^5.9.2"
+    "rollup-plugin-dts": "6.2.3",
+    "rollup-plugin-esbuild": "6.2.1",
+    "rollup-plugin-node-externals": "8.1.1",
+    "typescript": "5.9.3"
   },
   "packageManager": "[email protected]"
 }