chore(deps): pin dependencies

nekomeowww · Nov 25, 2024 · 09c6920 · 09c6920
1 parent 789670d
commit 09c6920
Show file tree

Hide file tree

Showing 10 changed files with 108 additions and 180 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -22,9 +22,9 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
         with:
           go-version: "^1.23"
           cache: true
@@ -36,13 +36,13 @@ jobs:
           echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
 
       - name: Go Build Cache
-        uses: actions/cache@v4
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       - name: Go Mod Cache
-        uses: actions/cache@v4
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}

diff --git a/.github/workflows/pr-docs-build.yaml b/.github/workflows/pr-docs-build.yaml
@@ -34,26 +34,26 @@ jobs:
           echo "${{ github.head_ref }}" > branch_name
 
       - name: Upload PR artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: pr-num
           path: ./pr_num
           overwrite: true
 
       - name: Upload PR artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: branch-name
           path: ./branch_name
           overwrite: true
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Install Node.js 22.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: 22.x
 
@@ -68,7 +68,7 @@ jobs:
         run: |
           echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         name: Setup pnpm cache
         with:
           path: ${{ env.STORE_PATH }}
@@ -90,7 +90,7 @@ jobs:
           VUE_PROD_HYDRATION_MISMATCH_DETAILS_FLAG: '1'
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: docs-${{ matrix.os }}-build
           path: docs/.vitepress/dist

diff --git a/.github/workflows/pr-docs-deployment.yaml b/.github/workflows/pr-docs-deployment.yaml
@@ -21,7 +21,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: Download artifact - PR
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow_conclusion: success
           run_id: ${{ github.event.workflow_run.id }}
@@ -30,7 +30,7 @@ jobs:
           allow_forks: true
 
       - name: Download artifact - PR
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow_conclusion: success
           run_id: ${{ github.event.workflow_run.id }}
@@ -49,7 +49,7 @@ jobs:
           echo "BRANCH_NAME=$(cat branch-name/branch_name)" >> $GITHUB_ENV
 
       - name: Download artifact - Ubuntu
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow_conclusion: success
           run_id: ${{ github.event.workflow_run.id }}
@@ -59,7 +59,7 @@ jobs:
 
       - name: Publish to Cloudflare Pages
         id: deploy
-        uses: cloudflare/pages-action@v1
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
@@ -72,15 +72,15 @@ jobs:
           wranglerVersion: '3'
 
       - name: Find Comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
         id: fc
         with:
           issue-number: ${{ env.PR_NUM }}
           comment-author: 'github-actions[bot]'
           body-includes: to Cloudflare Pages
 
       - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
         with:
           comment-id: ${{ steps.fc.outputs.comment-id }}
           issue-number: ${{ env.PR_NUM }}
@@ -101,7 +101,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'failure' }}
     steps:
       - name: Download artifact - PR
-        uses: dawidd6/action-download-artifact@v6
+        uses: dawidd6/action-download-artifact@bf251b5aa9c2f7eeb574a96ee720e24f801b7c11 # v6
         with:
           workflow_conclusion: success
           run_id: ${{ github.event.workflow_run.id }}
@@ -115,15 +115,15 @@ jobs:
           echo "PR_NUM=$(cat pr-num/pr_num)" >> $GITHUB_ENV
 
       - name: Find Comment
-        uses: peter-evans/find-comment@v3
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
         id: fc
         with:
           issue-number: ${{ env.PR_NUM }}
           comment-author: 'github-actions[bot]'
           body-includes: to Cloudflare Pages
 
       - name: Create or update comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
         with:
           comment-id: ${{ steps.fc.outputs.comment-id }}
           issue-number: ${{ env.PR_NUM }}

diff --git a/.github/workflows/production-docs-deployment.yaml b/.github/workflows/production-docs-deployment.yaml
@@ -17,12 +17,12 @@ jobs:
       url: https://ollama-operator.ayaka.io
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Install Node.js 22.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: 22.x
 
@@ -37,7 +37,7 @@ jobs:
         run: |
           echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         name: Setup pnpm cache
         with:
           path: ${{ env.STORE_PATH }}
@@ -61,7 +61,7 @@ jobs:
 
       - name: Publish to Cloudflare Pages
         id: deploy
-        uses: cloudflare/pages-action@v1
+        uses: cloudflare/pages-action@f0a1cd58cd66095dee69bfa18fa5efd1dde93bca # v1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
@@ -15,9 +15,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
         with:
           go-version: '1.23'
           cache: true
@@ -31,36 +31,36 @@ jobs:
 
       # Cache go build cache, used to speedup go test
       - name: Go Build Cache
-        uses: actions/cache@v4
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}
 
       # Cache go mod cache, used to speedup builds
       - name: Go Mod Cache
-        uses: actions/cache@v4
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
         with:
           path: ${{ steps.go-cache-paths.outputs.go-mod }}
           key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
 
       - name: GoReleaser
-        uses: goreleaser/goreleaser-action@v5
+        uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5
         with:
           version: latest
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Update new version in krew-index
-        uses: rajatjindal/[email protected]
+        uses: rajatjindal/krew-release-bot@df3eb197549e3568be8b4767eec31c5e8e8e6ad8 # v0.0.46
 
   ghcr_build:
     name: ollama-operator - Build for ghcr.io
     permissions:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Fetch version
         id: version
@@ -72,15 +72,15 @@ jobs:
       - # Add support for more platforms with QEMU (optional)
         # https://github.com/docker/setup-qemu-action
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
         with:
           platforms: linux/amd64,linux/arm64
 
       - name: Sign in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -93,7 +93,7 @@ jobs:
           echo "tag=ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}" >> $GITHUB_OUTPUT
 
       - name: Build and Push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
         with:
           platforms: linux/amd64,linux/arm64
           context: ./
@@ -109,7 +109,7 @@ jobs:
           make build-installer IMG=ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}
 
       - name: Upload installer
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: ollama-operator-installer-${{ steps.version.outputs.version }}
           path: dist/install.yaml
diff --git a/.github/workflows/unstable-build.yml b/.github/workflows/unstable-build.yml
@@ -10,20 +10,20 @@ jobs:
       packages: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - # Add support for more platforms with QEMU (optional)
         # https://github.com/docker/setup-qemu-action
         name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
         with:
           platforms: linux/amd64,linux/arm64
 
       - name: Sign in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -35,7 +35,7 @@ jobs:
           echo "tagunstable=ghcr.io/${{ github.repository }}:unstable" >> $GITHUB_OUTPUT
 
       - name: Build and Push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
         with:
           platforms: linux/amd64,linux/arm64
           context: ./
@@ -50,7 +50,7 @@ jobs:
           make build-installer IMG=ghcr.io/${{ github.repository }}:unstable
 
       - name: Upload installer
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
         with:
           name: ollama-operator-installer-unstable
           path: dist/install.yaml

diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.23 AS builder
+FROM golang:1.23@sha256:73f06be4578c9987ce560087e2e2ea6485fb605e3910542cadd8fa09fc5f3e31 AS builder
 
 ARG TARGETOS
 ARG TARGETARCH
@@ -34,7 +34,7 @@ RUN go build -a -o kollama cmd/kollama/main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot
+FROM gcr.io/distroless/static:nonroot@sha256:d71f4b239be2d412017b798a0a401c44c3049a3ca454838473a4c32ed076bfea
 
 WORKDIR /
 

diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
@@ -5,4 +5,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: ghcr.io/nekomeowww/ollama-operator
-  newTag: 0.10.1
+  newTag: 0.10.1@sha256:c9fdde9414192fb5abf8376ac6efe803b4343715eda8361a0b6cdd29258f4f24
diff --git a/docs/package.json b/docs/package.json
@@ -8,28 +8,28 @@
     "docs:preview": "vitepress preview"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^3.8.0",
-    "@iconify-json/carbon": "^1.2.4",
-    "@iconify-json/icon-park-outline": "^1.2.1",
-    "@iconify-json/octicon": "^1.2.1",
-    "@iconify-json/simple-icons": "^1.2.11",
-    "@iconify-json/twemoji": "^1.2.1",
-    "@nolebase/ui": "^2.8.1",
-    "@nolebase/ui-asciinema": "^2.8.1",
-    "@nolebase/vitepress-plugin-enhanced-mark": "^2.8.1",
-    "@nolebase/vitepress-plugin-enhanced-readabilities": "^2.8.1",
-    "@nolebase/vitepress-plugin-git-changelog": "^2.8.1",
-    "@nolebase/vitepress-plugin-highlight-targeted-heading": "^2.8.1",
-    "@types/node": "^22.9.0",
-    "@vueuse/core": "^11.2.0",
-    "asciinema-player": "^3.8.1",
-    "eslint": "^9.14.0",
-    "typescript": "^5.6.3",
-    "unocss": "^0.64.0",
-    "vite": "^5.4.10",
-    "vite-plugin-inspect": "^0.8.7",
-    "vitepress": "^1.5.0",
-    "vitepress-plugin-tabs": "^0.5.0",
-    "vue": "^3.5.12"
+    "@antfu/eslint-config": "3.8.0",
+    "@iconify-json/carbon": "1.2.4",
+    "@iconify-json/icon-park-outline": "1.2.1",
+    "@iconify-json/octicon": "1.2.1",
+    "@iconify-json/simple-icons": "1.2.11",
+    "@iconify-json/twemoji": "1.2.1",
+    "@nolebase/ui": "2.8.1",
+    "@nolebase/ui-asciinema": "2.8.1",
+    "@nolebase/vitepress-plugin-enhanced-mark": "2.8.1",
+    "@nolebase/vitepress-plugin-enhanced-readabilities": "2.8.1",
+    "@nolebase/vitepress-plugin-git-changelog": "2.8.1",
+    "@nolebase/vitepress-plugin-highlight-targeted-heading": "2.8.1",
+    "@types/node": "22.9.0",
+    "@vueuse/core": "11.2.0",
+    "asciinema-player": "3.8.1",
+    "eslint": "9.14.0",
+    "typescript": "5.6.3",
+    "unocss": "0.64.0",
+    "vite": "5.4.10",
+    "vite-plugin-inspect": "0.8.7",
+    "vitepress": "1.5.0",
+    "vitepress-plugin-tabs": "0.5.0",
+    "vue": "3.5.12"
   }
 }