chore(deps): pin dependencies (#218)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -29,15 +29,15 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup Node.js ${{ matrix.node }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: ${{ matrix.node }}
           cache: yarn
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2
         with:
           bun-version: ${{ matrix.bun }}
 
@@ -68,6 +68,6 @@ jobs:
         run: yarn benchmark
 
       - name: Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/codeql.yml

@@ -31,10 +31,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
@@ -43,9 +43,9 @@ jobs:
               - test/fixtures/yarn-pnp/.pnp.*
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
         with:
           category: '/language:${{ matrix.language }}'

.github/workflows/pkg-pr-new.yml

@@ -13,10 +13,10 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup Node.js LTS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: lts/*
           cache: yarn

.github/workflows/pkg-size.yml

@@ -14,10 +14,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Package Size Report
-        uses: pkg-size/action@v1
+        uses: pkg-size/action@a637fb0897b6f14f18e776d8c3dbccb34a1ad27b # v1
         continue-on-error: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -15,13 +15,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
 
       - name: Setup Node.js LTS
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: lts/*
           cache: yarn

.nvmrc

@@ -1 +1 @@
-20
+22

.yarn/releases/yarn-4.7.0.cjs renamed to .yarn/releases/yarn-4.8.1.cjs

@@ -9,4 +9,4 @@ plugins:
     path: .yarn/plugins/plugin-prepare-lifecycle.cjs
     spec: 'https://github.com/un-es/yarn-plugin-prepare-lifecycle/releases/download/v0.0.1/index.js'
 
-yarnPath: .yarn/releases/yarn-4.7.0.cjs
+yarnPath: .yarn/releases/yarn-4.8.1.cjs

.yarnrc.yml

@@ -7,7 +7,7 @@
   "author": "JounQin (https://www.1stG.me) <[email protected]>",
   "funding": "https://opencollective.com/unts",
   "license": "MIT",
-  "packageManager": "yarn@4.7.0",
+  "packageManager": "yarn@4.8.1",
   "engines": {
     "node": "^14.18.0 || >=16.0.0"
   },
@@ -81,13 +81,13 @@
     "eslint": "^9.23.0",
     "jest": "^29.7.0",
     "lint-staged": "^15.5.0",
-    "make-synchronized": "^0.3.1",
+    "make-synchronized": "^0.7.0",
     "node-gyp": "^11.1.0",
     "prettier": "^3.5.3",
     "simple-git-hooks": "^2.12.1",
     "sync-threads": "^1.0.1",
     "synckit": "link:.",
-    "tinyexec": "^0.3.2",
+    "tinyexec": "^1.0.0",
     "ts-expect": "^1.3.0",
     "ts-jest": "^29.2.6",
     "ts-node": "^10.9.2",

package.json

@@ -10877,10 +10877,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"make-synchronized@npm:^0.3.1":
-  version: 0.3.1
-  resolution: "make-synchronized@npm:0.3.1"
-  checksum: 10c0/bdd1052e17f461599850f718c57e6ef27fa9c4a5525e0c3910852c5928bdd751b5731027ba92ff28bdf075c00f68fcdcf9d31571b8f44290a137a67a25bdc0ea
+"make-synchronized@npm:^0.7.0":
+  version: 0.7.2
+  resolution: "make-synchronized@npm:0.7.2"
+  checksum: 10c0/15384e1ad0bbff2632abb726d0928a20a06c5edb92e5b027cd50f83c265f3bc118e3f4b5e597f4e6c3cd9d0059fc4ab6d2dd36d6718e717168b989e716c36809
   languageName: node
   linkType: hard
 
@@ -15152,13 +15152,13 @@ __metadata:
     eslint: "npm:^9.23.0"
     jest: "npm:^29.7.0"
     lint-staged: "npm:^15.5.0"
-    make-synchronized: "npm:^0.3.1"
+    make-synchronized: "npm:^0.7.0"
     node-gyp: "npm:^11.1.0"
     prettier: "npm:^3.5.3"
     simple-git-hooks: "npm:^2.12.1"
     sync-threads: "npm:^1.0.1"
     synckit: "link:."
-    tinyexec: "npm:^0.3.2"
+    tinyexec: "npm:^1.0.0"
     ts-expect: "npm:^1.3.0"
     ts-jest: "npm:^29.2.6"
     ts-node: "npm:^10.9.2"
@@ -15247,13 +15247,20 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tinyexec@npm:^0.3.0, tinyexec@npm:^0.3.2":
+"tinyexec@npm:^0.3.0":
   version: 0.3.2
   resolution: "tinyexec@npm:0.3.2"
   checksum: 10c0/3efbf791a911be0bf0821eab37a3445c2ba07acc1522b1fa84ae1e55f10425076f1290f680286345ed919549ad67527d07281f1c19d584df3b74326909eb1f90
   languageName: node
   linkType: hard
 
+"tinyexec@npm:^1.0.0":
+  version: 1.0.1
+  resolution: "tinyexec@npm:1.0.1"
+  checksum: 10c0/e1ec3c8194a0427ce001ba69fd933d0c957e2b8994808189ed8020d3e0c01299aea8ecf0083cc514ecbf90754695895f2b5c0eac07eb2d0c406f7d4fbb8feade
+  languageName: node
+  linkType: hard
+
 "tinyglobby@npm:^0.2.12":
   version: 0.2.12
   resolution: "tinyglobby@npm:0.2.12"