chore(deps): pin dependencies

.github/workflows/check-pr-title.yaml

@@ -16,7 +16,7 @@ jobs:
       statuses: write
       contents: read
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.5.3
+      - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5.5.3
         id: lint_pr_title
         env:
           GITHUB_TOKEN: ${{ github.token }}
@@ -30,7 +30,7 @@ jobs:
           requireScope: false
           wip: true
 
-      - uses: marocchino/sticky-pull-request-comment@v2.9.0
+      - uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # v2.9.0
         # When the previous steps fails, the workflow would stop. By adding this
         # condition you can continue the execution with the populated error message.
         if: always() && (steps.lint_pr_title.outputs.error_message != null)
@@ -52,7 +52,7 @@ jobs:
 
       # Delete a previous comment when the issue has been resolved
       - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
-        uses: marocchino/sticky-pull-request-comment@v2.9.0
+        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # v2.9.0
         with:
           header: pr-title-lint-error
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/checks.yaml

@@ -14,8 +14,8 @@ jobs:
     name: code_format
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install
       - name: Runs Prettier Formatter
@@ -25,8 +25,8 @@ jobs:
     name: spelling
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install
       - name: Runs cSpell Spell Checker
@@ -36,8 +36,8 @@ jobs:
     name: markdown_lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install
       - name: Runs Markdown Linter
@@ -47,8 +47,8 @@ jobs:
     name: code_lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install
       - name: Runs ESLint

.github/workflows/deploy-preview.yml

@@ -24,9 +24,9 @@ jobs:
     outputs:
       output_urls: "${{ steps.preview_deploy.outputs.urls }}"
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install
@@ -35,7 +35,7 @@ jobs:
         run: bun run build
 
       - name: "Deploy preview"
-        uses: matter-labs/action-hosting-deploy@main
+        uses: matter-labs/action-hosting-deploy@4d0d0023f1d92b9b7d16dda64b3d7abd2c98974b # main
         with:
           repoToken: '${{ secrets.GITHUB_TOKEN }}'
           firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_COMMUNITY_COOKBOOK_STAGING }}"

.github/workflows/deploy-prod.yml

@@ -22,18 +22,18 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           persist-credentials: false # <--- checking this in commit context
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install
       - name: "Deploy target: production 🚀"
         run: bun run build
 
-      - uses: matter-labs/action-hosting-deploy@main
+      - uses: matter-labs/action-hosting-deploy@4d0d0023f1d92b9b7d16dda64b3d7abd2c98974b # main
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
           firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_COMMUNITY_COOKBOOK_59807 }}"

.github/workflows/deploy-staging.yml

@@ -23,18 +23,18 @@ jobs:
     environment: staging
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           ref: "${{ github.event.inputs.ref }}"
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install
       - name: "Deploy target: staging"
         run: bun run build
 
-      - uses: matter-labs/action-hosting-deploy@main
+      - uses: matter-labs/action-hosting-deploy@4d0d0023f1d92b9b7d16dda64b3d7abd2c98974b # main
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
           firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_COMMUNITY_COOKBOOK_STAGING }}"

.github/workflows/playwright.yaml

@@ -67,13 +67,13 @@ jobs:
             mm-wallet: 'false'
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: oven-sh/setup-bun@v1
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+    - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
     - name: Install Dependencies
       run: bun install
     - name: Start the docs
       run: bun pm2 start 'PORT=3030 bun dev' --name docs
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
 
     # Setup Anvil for local testing
     - name: Run anvil-zksync
@@ -85,7 +85,7 @@ jobs:
     # ZK Game Dependencies
     - name: Install Rust Toolchain
       if: matrix.tutorial.test-file-name == 'zk-game'
-      uses: actions-rs/toolchain@v1
+      uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
       with:
         toolchain: 1.81.0
         components: llvm-tools, rustc-dev
@@ -98,7 +98,7 @@ jobs:
         echo "$HOME/.sp1/bin:${GITHUB_PATH}" >> $GITHUB_PATH
 
     - name: Run test for ${{ matrix.tutorial.test-file-name }}
-      uses: sarahschwartz/tutorial-tester@main
+      uses: sarahschwartz/tutorial-tester@f6099770c267ace79687748cd847b934d6e69eef # main
       with:
         tutorial-paths: ${{ matrix.tutorial.tutorial-paths }}
         config-path: ${{ matrix.tutorial.config-path }}

.github/workflows/release.yml

@@ -13,15 +13,15 @@ jobs:
     if: ${{ github.event.repository.full_name == github.repository }} && {{ !contains(github.event.head_commit.message, "skip ci") }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 'latest'
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install

code/cross-chain-governance/L1-governance/package.json

@@ -5,13 +5,13 @@
     "@nomicfoundation/hardhat-ethers": "^3.0.8",
     "@nomicfoundation/hardhat-toolbox": "^5.0.0",
     "@openzeppelin/contracts": "^5.2.0",
-    "@typechain/ethers-v6": "^0.5.1",
+    "@typechain/ethers-v6": "0.5.1",
     "@typechain/hardhat": "^9.1.0",
-    "dotenv": "^16.4.7",
-    "ethers": "^6.13.5",
+    "dotenv": "16.4.7",
+    "ethers": "6.13.5",
     "hardhat": "^2.22.18",
-    "ts-node": "^10.9.2",
-    "typechain": "^8.3.2",
+    "ts-node": "10.9.2",
+    "typechain": "8.3.2",
     "typescript": "^5.7.3"
   }
 }