chore(deps): pin dependencies

| datasource | package                        | from    | to      |
| ---------- | ------------------------------ | ------- | ------- |
| npm        | @babel/core                    | 7.28.0  | 7.28.0  |
| npm        | @grafana/eslint-config         | 8.1.0   | 8.1.0   |
| npm        | @grafana/plugin-e2e            | 2.1.7   | 2.1.7   |
| npm        | @grafana/tsconfig              | 2.0.0   | 2.0.0   |
| npm        | @playwright/test               | 1.54.1  | 1.54.1  |
| npm        | @stylistic/eslint-plugin       | 5.2.2   | 5.2.2   |
| npm        | @swc/core                      | 1.13.1  | 1.13.1  |
| npm        | @swc/helpers                   | 0.5.17  | 0.5.17  |
| npm        | @swc/jest                      | 0.2.39  | 0.2.39  |
| npm        | @testing-library/jest-dom      | 6.6.3   | 6.6.3   |
| npm        | @testing-library/react         | 16.3.0  | 16.3.0  |
| npm        | @types/jest                    | 30.0.0  | 30.0.0  |
| npm        | @types/lodash                  | 4.17.20 | 4.17.20 |
| npm        | @types/node                    | 24.1.0  | 24.1.0  |
| npm        | @types/uuid                    | 10.0.0  | 10.0.0  |
| npm        | @volkovlabs/eslint-config      | 2.0.0   | 2.0.0   |
| npm        | @volkovlabs/jest-selectors     | 1.5.0   | 1.5.0   |
| npm        | copy-webpack-plugin            | 13.0.0  | 13.0.0  |
| npm        | css-loader                     | 7.1.2   | 7.1.2   |
| npm        | eslint                         | 9.31.0  | 9.31.0  |
| npm        | eslint-webpack-plugin          | 5.0.2   | 5.0.2   |
| npm        | fork-ts-checker-webpack-plugin | 9.1.0   | 9.1.0   |
| npm        | jest                           | 30.0.4  | 30.0.4  |
| npm        | jest-environment-jsdom         | 30.0.4  | 30.0.4  |
| npm        | prettier                       | 3.6.2   | 3.6.2   |
| npm        | replace-in-file-webpack-plugin | 1.0.6   | 1.0.6   |
| npm        | sass                           | 1.89.2  | 1.89.2  |
| npm        | sass-loader                    | 16.0.5  | 16.0.5  |
| npm        | style-loader                   | 4.0.0   | 4.0.0   |
| npm        | swc-loader                     | 0.2.6   | 0.2.6   |
| npm        | ts-node                        | 10.9.2  | 10.9.2  |
| npm        | tsconfig-paths                 | 4.2.0   | 4.2.0   |
| npm        | util                           | 0.12.5  | 0.12.5  |
| npm        | webpack                        | 5.100.2 | 5.100.2 |
| npm        | webpack-cli                    | 6.0.1   | 6.0.1   |
| npm        | webpack-livereload-plugin      | 3.0.2   | 3.0.2   |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/ci.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -64,7 +64,7 @@ jobs:
           echo "checksum=$(cat ./${{ steps.metadata.outputs.archive-checksum }} | cut -d' ' -f1)" >> $GITHUB_OUTPUT
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
         with:
           directory: ./coverage/
           files: ./coverage/lcov.info
@@ -73,13 +73,13 @@ jobs:
           fail_ci_if_error: false
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive }}
           path: ${{ steps.metadata.outputs.archive }}
 
       - name: Upload artifact checksum
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.metadata.outputs.archive-checksum }}
           path: ${{ steps.metadata.outputs.archive-checksum }}

.github/workflows/codeql-analysis.yml

@@ -38,11 +38,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -55,7 +55,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -68,4 +68,4 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2

.github/workflows/e2e.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -36,7 +36,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report
@@ -47,10 +47,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -70,7 +70,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report-dependency

.github/workflows/main.yml

@@ -18,10 +18,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -41,7 +41,7 @@ jobs:
       - name: Stop Grafana
         run: docker compose down
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: ${{ !cancelled() }}
         with:
           name: playwright-report

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
       attestations: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
       - uses: grafana/plugin-actions/build-plugin@main
         with:

docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   grafana:
-    image: ghcr.io/volkovlabs/app:latest
+    image: ghcr.io/volkovlabs/app:latest@sha256:7255f71881b7aa94198da4760a3c74fbbc5f6d16b592ec55f69c40c4e479b7be
     ports:
       - 3000:3000/tcp
     environment:
@@ -15,7 +15,7 @@ services:
       - dev
 
   grafana-main:
-    image: grafana/grafana:main
+    image: grafana/grafana:main@sha256:da4dbbb9df8821f0ae6d2f078809422262eafe020b5b1e2584ed9853b60d4a2d
     ports:
       - 3000:3000/tcp
     environment:
@@ -30,7 +30,7 @@ services:
       - main
 
   grafana-dep:
-    image: grafana/grafana:11.0.0
+    image: grafana/grafana:11.0.0@sha256:0dc5a246ab16bb2c38a349fb588174e832b4c6c2db0981d0c3e6cd774ba66a54
     ports:
       - 3000:3000/tcp
     environment: