Skip to content

Commit 252f7d4

Browse files
authored
chore: pin dependencies in Dockerfiles (coder#19587)
Fixes up some security issues related to lack of pinned dependencies
1 parent b729c29 commit 252f7d4

File tree

10 files changed

+75
-126
lines changed

10 files changed

+75
-126
lines changed

.github/workflows/release.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
3838
steps:
3939
- name: Allow only maintainers/admins
40-
uses: actions/github-script@v7.0.1
40+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
4141
with:
4242
github-token: ${{ secrets.GITHUB_TOKEN }}
4343
script: |

dogfood/coder/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ RUN apt-get update && \
4141
# goimports for updating imports
4242
go install golang.org/x/tools/cmd/goimports@v0.31.0 && \
4343
# protoc-gen-go is needed to build sysbox from source
44-
go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.30 && \
44+
go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.30.0 && \
4545
# drpc support for v2
4646
go install storj.io/drpc/cmd/protoc-gen-go-drpc@v0.0.34 && \
4747
# migrate for migration support for v2

offlinedocs/package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,8 @@
4646
},
4747
"pnpm": {
4848
"overrides": {
49-
"@babel/runtime": "7.26.10"
49+
"@babel/runtime": "7.26.10",
50+
"brace-expansion": "1.1.12"
5051
}
5152
}
5253
}

offlinedocs/pnpm-lock.yaml

Lines changed: 7 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,5 +13,10 @@
1313
"markdown-table-formatter": "^1.6.1",
1414
"markdownlint-cli2": "^0.16.0",
1515
"quicktype": "^23.0.0"
16+
},
17+
"pnpm": {
18+
"overrides": {
19+
"brace-expansion": "1.1.12"
20+
}
1621
}
1722
}

pnpm-lock.yaml

Lines changed: 8 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

scripts/apidocgen/package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,10 @@
99
"pnpm": {
1010
"overrides": {
1111
"@babel/runtime": "7.26.10",
12-
"form-data": "4.0.4"
12+
"form-data": "4.0.4",
13+
"yargs-parser": "13.1.2",
14+
"ajv": "6.12.3",
15+
"markdown-it": "12.3.2"
1316
}
1417
}
1518
}

0 commit comments

Comments
 (0)