chore: pin dependencies in Dockerfiles

coder · sreya · Aug 27, 2025 · Aug 27, 2025 · Aug 27, 2025 · Aug 27, 2025
commit ec6230c715e2533fc9a0fbc11f5436660695bd2f
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -37,7 +37,7 @@ jobs:
     runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
     steps:
       - name: Allow only maintainers/admins
-        uses: actions/[email protected]
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |

diff --git a/dogfood/coder/Dockerfile b/dogfood/coder/Dockerfile
@@ -41,7 +41,7 @@ RUN apt-get update && \
 	# goimports for updating imports
 	go install golang.org/x/tools/cmd/[email protected] && \
 	# protoc-gen-go is needed to build sysbox from source
-	go install google.golang.org/protobuf/cmd/[email protected] && \
+	go install google.golang.org/protobuf/cmd/[email protected].0 && \
 	# drpc support for v2
 	go install storj.io/drpc/cmd/[email protected] && \
 	# migrate for migration support for v2

diff --git a/offlinedocs/package.json b/offlinedocs/package.json
@@ -46,7 +46,8 @@
 	},
 	"pnpm": {
 		"overrides": {
-			"@babel/runtime": "7.26.10"
+			"@babel/runtime": "7.26.10",
+			"brace-expansion": "1.1.12"
 		}
 	}
 }
diff --git a/offlinedocs/pnpm-lock.yaml b/offlinedocs/pnpm-lock.yaml
diff --git a/package.json b/package.json
@@ -13,5 +13,10 @@
 		"markdown-table-formatter": "^1.6.1",
 		"markdownlint-cli2": "^0.16.0",
 		"quicktype": "^23.0.0"
+	},
+	"pnpm": {
+		"overrides": {
+			"brace-expansion": "1.1.12"
+		}
 	}
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
@@ -205,7 +205,8 @@
 			"esbuild": "^0.25.0",
 			"form-data": "4.0.4",
 			"prismjs": "1.30.0",
-			"dompurify": "3.2.6"
+			"dompurify": "3.2.6",
+			"brace-expansion": "1.1.12"
 		},
 		"ignoredBuiltDependencies": [
 			"storybook-addon-remix-react-router"