chore(deps): pin dependencies

| datasource | package                        | from    | to      |
| ---------- | ------------------------------ | ------- | ------- |
| npm        | @babel/core                    | 7.28.0  | 7.28.0  |
| npm        | @emotion/jest                  | 11.13.0 | 11.13.0 |
| npm        | @grafana/eslint-config         | 8.1.0   | 8.1.0   |
| npm        | @grafana/plugin-e2e            | 2.1.7   | 2.1.7   |
| npm        | @grafana/tsconfig              | 2.0.0   | 2.0.0   |
| npm        | @playwright/test               | 1.54.1  | 1.54.1  |
| npm        | @stylistic/eslint-plugin       | 5.2.2   | 5.2.2   |
| npm        | @swc/core                      | 1.13.3  | 1.13.3  |
| npm        | @swc/helpers                   | 0.5.17  | 0.5.17  |
| npm        | @swc/jest                      | 0.2.39  | 0.2.39  |
| npm        | @testing-library/jest-dom      | 6.6.4   | 6.6.4   |
| npm        | @testing-library/react         | 16.3.0  | 16.3.0  |
| npm        | @types/jest                    | 29.5.14 | 29.5.14 |
| npm        | @types/lodash                  | 4.17.20 | 4.17.20 |
| npm        | @types/node                    | 24.1.0  | 24.1.0  |
| npm        | @types/semver                  | 7.7.0   | 7.7.0   |
| npm        | @types/uuid                    | 10.0.0  | 10.0.0  |
| npm        | @volkovlabs/eslint-config      | 2.0.0   | 2.0.0   |
| npm        | @volkovlabs/jest-selectors     | 1.5.0   | 1.5.0   |
| npm        | copy-webpack-plugin            | 12.0.2  | 12.0.2  |
| npm        | css-loader                     | 7.1.2   | 7.1.2   |
| npm        | eslint                         | 9.32.0  | 9.32.0  |
| npm        | eslint-webpack-plugin          | 5.0.2   | 5.0.2   |
| npm        | fork-ts-checker-webpack-plugin | 9.1.0   | 9.1.0   |
| npm        | glob                           | 11.0.3  | 11.0.3  |
| npm        | jest                           | 29.7.0  | 29.7.0  |
| npm        | jest-environment-jsdom         | 29.7.0  | 29.7.0  |
| npm        | prettier                       | 3.6.2   | 3.6.2   |
| npm        | replace-in-file-webpack-plugin | 1.0.6   | 1.0.6   |
| npm        | resize-observer-polyfill       | 1.5.1   | 1.5.1   |
| npm        | sass                           | 1.89.2  | 1.89.2  |
| npm        | sass-loader                    | 16.0.5  | 16.0.5  |
| npm        | style-loader                   | 4.0.0   | 4.0.0   |
| npm        | swc-loader                     | 0.2.6   | 0.2.6   |
| npm        | ts-node                        | 10.9.2  | 10.9.2  |
| npm        | tsconfig-paths                 | 4.2.0   | 4.2.0   |
| npm        | tsconfig-paths-webpack-plugin  | 4.2.0   | 4.2.0   |
| npm        | typescript                     | 5.8.3   | 5.8.3   |
| npm        | util                           | 0.12.5  | 0.12.5  |
| npm        | webpack                        | 5.101.0 | 5.101.0 |
| npm        | webpack-cli                    | 6.0.1   | 6.0.1   |
| npm        | webpack-livereload-plugin      | 3.0.2   | 3.0.2   |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/ci.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -64,7 +64,7 @@ jobs:
           echo "checksum=$(cat ./${{ steps.metadata.outputs.archive-checksum }} | cut -d' ' -f1)" >> $GITHUB_OUTPUT
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
         with:
           directory: ./coverage/
           files: ./coverage/lcov.info
@@ -73,13 +73,13 @@ jobs:
           fail_ci_if_error: false
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive }}
           path: ${{ steps.metadata.outputs.archive }}
 
       - name: Upload artifact checksum
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive-checksum }}
           path: ${{ steps.metadata.outputs.archive-checksum }}

.github/workflows/codeql-analysis.yml

@@ -38,11 +38,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -69,4 +69,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2

.github/workflows/e2e.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: "20"
           cache: "npm"
@@ -36,7 +36,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report
@@ -47,10 +47,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: "20"
           cache: "npm"
@@ -70,7 +70,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report-dependency

.github/workflows/main.yml

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -41,7 +41,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
       attestations: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
 
       - uses: grafana/plugin-actions/build-plugin@main
         with:

docker-compose.yml

@@ -20,7 +20,7 @@ services:
       - dependency
 
   grafana:
-    image: ghcr.io/volkovlabs/app:latest
+    image: ghcr.io/volkovlabs/app:latest@sha256:7255f71881b7aa94198da4760a3c74fbbc5f6d16b592ec55f69c40c4e479b7be
     ports:
       - 3000:3000/tcp
     environment:
@@ -34,7 +34,7 @@ services:
       - dev
 
   postgres:
-    image: postgres
+    image: postgres@sha256:1ffc019dae94eca6b09a49ca67d37398951346de3c3d0cfe23d8d4ca33da83fb
     restart: always
     environment:
       POSTGRES_PASSWORD: postgres
@@ -65,7 +65,7 @@ services:
       - dependency
 
   grafana-main:
-    image: grafana/grafana:main
+    image: grafana/grafana:main@sha256:067e385fa582fb5229442cd2b4d4aec1834c5e9339867ea99e78f7495945bf76
     ports:
       - 3000:3000/tcp
     environment:
@@ -79,7 +79,7 @@ services:
       - main
 
   grafana-dep:
-    image: grafana/grafana:11.0.0
+    image: grafana/grafana:11.0.0@sha256:0dc5a246ab16bb2c38a349fb588174e832b4c6c2db0981d0c3e6cd774ba66a54
     ports:
       - 3000:3000/tcp
     environment: