Pin dependencies (#948)

Co-authored-by: grafanarenovatebot[bot] <146220760+grafanarenovatebot[bot]@users.noreply.github.com>

.github/workflows/vale.yml

@@ -7,7 +7,7 @@ jobs:
     if: ${{ github.event.issue.pull_request && github.event.issue.state == 'open' && contains(github.event.comment.body, '/vale') }}
     runs-on: ubuntu-latest
     container:
-      image: grafana/vale:latest
+      image: grafana/vale:latest@sha256:e14889d8d0e31bc32bbc09f3aa2c5d98c2c988c53ec5a3f5753dc46a8889bf3a
     steps:
       - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:

.github/workflows/validate-documentation.yml

@@ -8,7 +8,7 @@ jobs:
     if: ${{ github.repository == 'grafana/writers-toolkit' }}
     runs-on: ubuntu-latest
     container:
-      image: grafana/doc-validator:v4.0.0
+      image: grafana/doc-validator:v4.0.0@sha256:c6e813cf1d15c560e0171242b85e646e8af993730d069668d84d2c9eb611c262
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -77,7 +77,7 @@ jobs:
   vale:
     runs-on: ubuntu-latest
     container:
-      image: grafana/vale:latest
+      image: grafana/vale:latest@sha256:e14889d8d0e31bc32bbc09f3aa2c5d98c2c988c53ec5a3f5753dc46a8889bf3a
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:

add-to-docs-project/package.json

@@ -1,15 +1,15 @@
 {
   "author": "@jdbaldry",
   "dependencies": {
-    "@actions/core": "^1.10.1",
-    "@octokit/graphql": "^8.1.1",
-    "@octokit/rest": "^21.0.2"
+    "@actions/core": "1.11.1",
+    "@octokit/graphql": "8.1.1",
+    "@octokit/rest": "21.0.2"
   },
   "description": "Adds all issues labeled `type/docs` to the Docs organization project.",
   "devDependencies": {
-    "@types/node": "^22.7.4",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.6.3"
+    "@types/node": "22.7.5",
+    "ts-node": "10.9.2",
+    "typescript": "5.6.3"
   },
   "engines": {
     "node": ">=22",

package.json

@@ -15,7 +15,7 @@
   },
   "homepage": "https://grafana.com/docs/writers-toolkit",
   "devDependencies": {
-    "prettier": "^2.8.8"
+    "prettier": "2.8.8"
   },
   "engines": {}
 }

yarn.lock

@@ -2,7 +2,7 @@
 # yarn lockfile v1
 
 
-prettier@^2.8.8:
+[email protected]:
   version "2.8.8"
   resolved "https://registry.npmjs.org/prettier/-/prettier-2.8.8.tgz"
   integrity sha512-tdN8qQGvNjw4CHbY+XXk0JgCXn9QiF21a55rBe5LJAU+kDyC4WQn4+awm2Xfk2lQMk5fKup9XgzTZtGkjBdP9Q==