chore(deps): pin dependencies

.github/workflows/check-pr-title.yaml

@@ -16,7 +16,7 @@ jobs:
       statuses: write
       contents: read
     steps:
-      - uses: amannn/[email protected]
+      - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5.5.3
         id: lint_pr_title
         env:
           GITHUB_TOKEN: ${{ github.token }}
@@ -30,7 +30,7 @@ jobs:
           requireScope: false
           wip: true
 
-      - uses: marocchino/[email protected]
+      - uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # v2.9.0
         # When the previous steps fails, the workflow would stop. By adding this
         # condition you can continue the execution with the populated error message.
         if: always() && (steps.lint_pr_title.outputs.error_message != null)
@@ -52,7 +52,7 @@ jobs:
 
       # Delete a previous comment when the issue has been resolved
       - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
-        uses: marocchino/[email protected]
+        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # v2.9.0
         with:
           header: pr-title-lint-error
           GITHUB_TOKEN: ${{ github.token }}

.github/workflows/checks.yaml

@@ -14,8 +14,8 @@ jobs:
     name: code_format
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs Prettier Formatter
@@ -25,8 +25,8 @@ jobs:
     name: spelling
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs cSpell Spell Checker
@@ -36,8 +36,8 @@ jobs:
     name: markdown_lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs Markdown Linter
@@ -47,8 +47,8 @@ jobs:
     name: code_lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
       - name: Install Dependencies
         run: bun install --frozen-lockfile
       - name: Runs ESLint

.github/workflows/deploy-preview.yml

@@ -24,9 +24,9 @@ jobs:
     outputs:
       output_urls: "${{ steps.preview_deploy.outputs.urls }}"
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile

.github/workflows/deploy-prod.yml

@@ -22,11 +22,11 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           persist-credentials: false # <--- checking this in commit context
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile

.github/workflows/deploy-staging.yml

@@ -23,11 +23,11 @@ jobs:
     environment: staging
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: "${{ github.event.inputs.ref }}"
 
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile

.github/workflows/playwright.yaml

@@ -18,15 +18,15 @@ jobs:
           - "frontend-paymaster"
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: oven-sh/setup-bun@v1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+    - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
     - name: Install Dependencies
       run: bun install --frozen-lockfile
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
     - name: Install Playwright Browsers
       run: bun playwright install chromium --with-deps
     - name: Run Era Test Node
-      uses: dutterbutter/era-test-node-action@v1
+      uses: dutterbutter/era-test-node-action@66121581304ee2d4f0c1c2de46a3d08f1c2f5264 # v1
     - name: Create Metamask Cache
       run: xvfb-run bun setup:mm
     - name: Run test for ${{ matrix.tutorial }}
@@ -35,7 +35,7 @@ jobs:
         export COLUMNS=80
         export LINES=24
         xvfb-run bun test:headful tests/${{ matrix.tutorial }}.spec.ts
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
       if: always()
       with:
         name: playwright-report-${{ matrix.tutorial }}

.github/workflows/release.yml

@@ -13,15 +13,15 @@ jobs:
     if: ${{ github.event.repository.full_name == github.repository }} && {{ !contains(github.event.head_commit.message, "skip ci") }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: 'latest'
-      - uses: oven-sh/setup-bun@v1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1
 
       - name: "Install dependencies"
         run: bun install --production --frozen-lockfile

code/frontend-paymaster/contracts/package.json

@@ -19,14 +19,14 @@
     "@matterlabs/zksync-contracts": "^0.6.1",
     "@openzeppelin/contracts": "^4.9.2",
     "@nomicfoundation/hardhat-verify": "^2.0.9",
-    "@types/chai": "^4.3.16",
-    "@types/mocha": "^10.0.7",
-    "chai": "^4.5.0",
-    "dotenv": "^16.4.5",
-    "ethers": "^6.13.2",
+    "@types/chai": "4.3.20",
+    "@types/mocha": "10.0.8",
+    "chai": "4.5.0",
+    "dotenv": "16.4.5",
+    "ethers": "6.13.3",
     "hardhat": "^2.22.7",
-    "mocha": "^10.7.0",
-    "ts-node": "^10.9.2",
+    "mocha": "10.7.3",
+    "ts-node": "10.9.2",
     "typescript": "^5.5.4",
     "zksync-ethers": "^6.11.0"
   }

code/frontend-paymaster/frontend/package.json

@@ -16,13 +16,13 @@
     "zksync-ethers": "^6.13.1"
   },
   "devDependencies": {
-    "@tsconfig/node20": "^20.1.4",
-    "@types/node": "^20.14.5",
-    "@vitejs/plugin-vue": "^5.0.5",
-    "@vue/tsconfig": "^0.5.1",
-    "npm-run-all2": "^6.2.0",
+    "@tsconfig/node20": "20.1.4",
+    "@types/node": "20.16.11",
+    "@vitejs/plugin-vue": "5.1.4",
+    "@vue/tsconfig": "0.5.1",
+    "npm-run-all2": "6.2.3",
     "typescript": "~5.4.0",
-    "vite": "^5.3.1",
+    "vite": "5.4.8",
     "vue-tsc": "^2.0.21"
   }
 }

code/multisig/package.json

@@ -17,14 +17,14 @@
     "@matterlabs/hardhat-zksync": "1.1.0",
     "@matterlabs/zksync-contracts": "^0.6.1",
     "@openzeppelin/contracts": "4.9.5",
-    "@types/chai": "^5.0.0",
-    "@types/mocha": "^10.0.7",
-    "chai": "^5.1.1",
-    "dotenv": "^16.4.5",
-    "ethers": "^6.13.2",
+    "@types/chai": "5.0.0",
+    "@types/mocha": "10.0.8",
+    "chai": "5.1.1",
+    "dotenv": "16.4.5",
+    "ethers": "6.13.2",
     "hardhat": "^2.22.7",
-    "mocha": "^10.7.0",
-    "ts-node": "^10.9.2",
+    "mocha": "10.7.3",
+    "ts-node": "10.9.2",
     "typescript": "^5.5.4",
     "zksync-ethers": "^6.11.0"
   }

code/wagmi/package.json

@@ -19,7 +19,7 @@
     "wagmi": "^2.12.32"
   },
   "devDependencies": {
-    "@types/node": "^20",
+    "@types/node": "20.17.12",
     "@types/react": "^18",
     "@types/react-dom": "^18",
     "typescript": "^5"