Pin dependencies

Author: renovate[bot]

.github/actions/install-deps/action.yml

@@ -35,7 +35,7 @@ runs:
         ruby-version: 3.4.8
         bundler-cache: true
 
-    - uses: actions/setup-java@v5
+    - uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
       with:
         distribution: "temurin"
         java-version: "17"

.github/workflows/auto-update-documentation.yml

@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Setup Dependencies
         run: |
@@ -78,10 +78,10 @@ jobs:
       VESPA_CLI_DOC_DIR: en/reference/clients/vespa-cli
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Install Vespa CLI
-        uses: vespa-engine/setup-vespa-cli-action@v1
+        uses: vespa-engine/setup-vespa-cli-action@6072462cfdaa5f704890dcfa9160759099e58469 # v1
 
       - name: Generate Vespa CLI Documentation
         id: update-docs
@@ -128,9 +128,9 @@ jobs:
       - update-vespa-cli-doc
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5
         with:
           distribution: "temurin"
           java-version: "17"

.github/workflows/deploy-pages.yml

@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Setup Ruby
         # https://github.com/ruby/setup-ruby/releases/tag/v1.207.0
         uses: ruby/setup-ruby@v1
@@ -51,7 +51,7 @@ jobs:
           JEKYLL_ENV: production
       - name: Upload artifact
         # Automatically uploads an artifact from the './_site' directory by default
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
 
   # Deployment job
   deploy:

.github/workflows/feed.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
     - uses: ruby/setup-ruby@v1
       with:
@@ -36,7 +36,7 @@ jobs:
         bundle exec jekyll build -p _plugins-vespafeed
 
     - name: Setup Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6
       with:
         python-version: '3.x'
 
@@ -45,7 +45,7 @@ jobs:
         pip3 install PyYAML mmh3 requests html5lib beautifulsoup4 markdownify tiktoken
 
     - name: Install Vespa CLI
-      uses: vespa-engine/setup-vespa-cli-action@v1
+      uses: vespa-engine/setup-vespa-cli-action@6072462cfdaa5f704890dcfa9160759099e58469 # v1
 
     - name: Feed docs site
       run: |

.github/workflows/verify-guides.yml

@@ -25,7 +25,7 @@ jobs:
     steps:
       - uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - uses: ./.github/actions/install-deps
         with:

_sass/denali-css/package.json

@@ -18,19 +18,19 @@
     "url": "[email protected]:denali-design/denali-css.git"
   },
   "devDependencies": {
-    "@babel/core": "^7.11.6",
-    "@storybook/addon-actions": "^9.0.0",
-    "@storybook/addon-essentials": "^8.0.0",
-    "@storybook/addon-links": "^10.0.7",
-    "@storybook/html": "^10.0.7",
-    "babel-loader": "^10.0.0",
-    "browser-sync": "^3.0.2",
-    "gulp": "^5.0.0",
-    "gulp-connect-php": "^1.0.3",
-    "gulp-rename": "^2.0.0",
-    "gulp-sass": "^6.0.0",
-    "mocha": "^11.0.0",
-    "react-is": "^19.0.0"
+    "@babel/core": "7.27.4",
+    "@storybook/addon-actions": "9.0.8",
+    "@storybook/addon-essentials": "8.6.14",
+    "@storybook/addon-links": "10.0.7",
+    "@storybook/html": "10.0.7",
+    "babel-loader": "10.0.0",
+    "browser-sync": "3.0.4",
+    "gulp": "5.0.1",
+    "gulp-connect-php": "1.0.3",
+    "gulp-rename": "2.0.0",
+    "gulp-sass": "6.0.1",
+    "mocha": "11.5.0",
+    "react-is": "19.1.0"
   },
   "release": {
     "debug": false,