nordeck · renovate · Sep 8, 2026
@@ -15,7 +15,7 @@ jobs:
     outputs:
       docker-tag: ${{ steps.meta.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
           # required for changesets
           fetch-depth: '0'
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 'lts/*'
           cache: 'yarn'
@@ -57,18 +57,18 @@ jobs:
         run: yarn generate-disclaimer
 
       - name: Login to ghcr.io
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
       - name: Generate Docker metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
         env:
           DOCKER_METADATA_PR_HEAD_SHA: true
         with:
@@ -82,7 +82,7 @@ jobs:
 
       - name: Build and push
         id: build_and_push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
         with:
           push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'pull_request' && secrets.GH_APP_OS_APP_ID != '' }}
           context: .
@@ -107,7 +107,7 @@ jobs:
 
       - name: Upload SBOM report as a build artifact
         if: ${{ success() && steps.build_and_push.outputs.digest }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: sbom-spdx-report
           path: 'sbom.spdx.json'
@@ -134,12 +134,12 @@ jobs:
     needs: build
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with:
           fetch-depth: 0 # need main branch to diff against
       - name: Set up Helm
-        uses: azure/setup-helm@v4
-      - uses: actions/setup-python@v5
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
           python-version: '3.14'
           check-latest: true
@@ -189,7 +189,7 @@ jobs:
           token: ${{ steps.generate_token.outputs.token }}
 
       - name: Login to ghcr.io
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -264,7 +264,7 @@ jobs:
           private_key: ${{ secrets.GH_APP_OS_PRIVATE_KEY }}
 
       - name: Trigger Workflow
-        uses: actions/github-script@v7
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
         with:
           github-token: ${{ steps.generate_token.outputs.token }}
           script: |

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Login to ghcr.io
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}

@@ -21,15 +21,15 @@ jobs:
     steps:
       - name: Generate Docker metadata of the existing image
         id: meta-existing-tag
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
         with:
           images: ${{ env.DOCKER_IMAGE }}
           tags: |
             type=sha,prefix=
 
       - name: Generate Docker metadata of the new image
         id: meta-new-tags
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
         with:
           images: ${{ env.DOCKER_IMAGE }}
           labels: |
@@ -46,7 +46,7 @@ jobs:
           echo "FROM $SOURCE_IMAGE" > Dockerfile
 
       - name: Login to ghcr.io
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -56,11 +56,11 @@ jobs:
         uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
       - name: Build and push
         id: build_and_push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
         with:
           push: true
           context: .

@@ -8,7 +8,7 @@ image:
   repository: ghcr.io/nordeck/matrix-poll-widget
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: ""
+  tag: "@sha256:d782a27db53ee809d2c0e1fb81d37237e809ac93ffa7234da0ab5b7733c88070"
 
 imagePullSecrets: []
 nameOverride: ""

@@ -42,48 +42,48 @@
     "uuid": "^14.0.0"
   },
   "devDependencies": {
-    "@changesets/cli": "^2.28.1",
-    "@eslint/compat": "^1.3.1",
-    "@eslint/js": "^9.39.2",
-    "@matrix-widget-toolkit/testing": "^4.1.0",
-    "@testing-library/dom": "^10.4.0",
-    "@testing-library/jest-dom": "^6.9.1",
-    "@testing-library/react": "^16.3.1",
-    "@testing-library/user-event": "^14.6.1",
-    "@types/lodash": "^4.17.24",
-    "@types/luxon": "^3.2.0",
-    "@types/node": "^20.19.37",
-    "@types/pdfmake": "^0.2.11",
-    "@types/react": "^18.3.23",
-    "@types/react-beautiful-dnd": "^13.1.8",
-    "@types/react-dom": "^18.3.1",
-    "@types/uuid": "^9.0.7",
-    "@vitejs/plugin-basic-ssl": "^2.1.4",
-    "@vitejs/plugin-react-swc": "^4.2.2",
-    "@vitest/coverage-v8": "^3.2.4",
-    "@vitest/eslint-plugin": "^1.6.9",
-    "axe-core": "^4.11.1",
-    "depcheck": "^1.4.7",
-    "dotenv-cli": "^7.4.4",
-    "eslint": "^9.39.2",
-    "eslint-config-prettier": "^10.1.5",
-    "eslint-plugin-notice": "^1.0.0",
-    "eslint-plugin-promise": "^7.2.1",
-    "eslint-plugin-react": "^7.37.5",
-    "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-testing-library": "^7.13.3",
+    "@changesets/cli": "2.29.8",
+    "@eslint/compat": "1.4.1",
+    "@eslint/js": "9.39.4",
+    "@matrix-widget-toolkit/testing": "4.1.0",
+    "@testing-library/dom": "10.4.0",
+    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/react": "16.3.2",
+    "@testing-library/user-event": "14.6.1",
+    "@types/lodash": "4.17.24",
+    "@types/luxon": "3.2.0",
+    "@types/node": "20.19.39",
+    "@types/pdfmake": "0.2.11",
+    "@types/react": "18.3.26",
+    "@types/react-beautiful-dnd": "13.1.8",
+    "@types/react-dom": "18.3.7",
+    "@types/uuid": "9.0.7",
+    "@vitejs/plugin-basic-ssl": "2.1.4",
+    "@vitejs/plugin-react-swc": "4.2.2",
+    "@vitest/coverage-v8": "3.2.4",
+    "@vitest/eslint-plugin": "1.6.13",
+    "axe-core": "4.11.3",
+    "depcheck": "1.4.7",
+    "dotenv-cli": "7.4.4",
+    "eslint": "9.39.4",
+    "eslint-config-prettier": "10.1.5",
+    "eslint-plugin-notice": "1.0.0",
+    "eslint-plugin-promise": "7.2.1",
+    "eslint-plugin-react": "7.37.5",
+    "eslint-plugin-react-hooks": "5.2.0",
+    "eslint-plugin-testing-library": "7.15.4",
     "happy-dom": "^20.0.8",
-    "husky": "^9.1.7",
-    "i18next-cli": "^1.20.1",
-    "lint-staged": "^15.5.2",
-    "prettier": "^3.8.0",
-    "prettier-plugin-organize-imports": "^4.1.0",
-    "sass": "^1.97.2",
-    "typescript": "^5.7.2",
-    "typescript-eslint": "^8.53.0",
-    "vite": "^7.3.1",
-    "vitest": "^3.2.4",
-    "yarn-deduplicate": "^6.0.2"
+    "husky": "9.1.7",
+    "i18next-cli": "1.20.1",
+    "lint-staged": "15.5.2",
+    "prettier": "3.8.1",
+    "prettier-plugin-organize-imports": "4.1.0",
+    "sass": "1.98.0",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.56.1",
+    "vite": "7.3.5",
+    "vitest": "3.2.6",
+    "yarn-deduplicate": "6.0.2"
   },
   "engines": {
     "node": ">=20",