chore(deps): pin dependencies

| datasource | package                        | from      | to        |
| ---------- | ------------------------------ | --------- | --------- |
| npm        | @arethetypeswrong/cli          | 0.18.2    | 0.18.2    |
| npm        | @babel/core                    | 7.27.4    | 7.27.4    |
| npm        | @grafana/data                  | 12.2.1    | 12.2.1    |
| npm        | @grafana/eslint-config         | 8.0.0     | 8.0.0     |
| npm        | @grafana/plugin-e2e            | 2.0.2     | 2.0.2     |
| npm        | @grafana/plugin-e2e            | 1.14.6    | 1.14.6    |
| npm        | @grafana/runtime               | 12.2.1    | 12.2.1    |
| npm        | @grafana/tsconfig              | 2.0.0     | 2.0.0     |
| npm        | @playwright/test               | 1.52.0    | 1.52.0    |
| npm        | @rollup/plugin-node-resolve    | 16.0.3    | 16.0.3    |
| npm        | @swc/helpers                   | 0.5.13    | 0.5.13    |
| npm        | @swc/jest                      | 0.2.37    | 0.2.37    |
| npm        | @testing-library/jest-dom      | 6.4.2     | 6.4.2     |
| npm        | @testing-library/react         | 16.1.0    | 16.1.0    |
| npm        | @types/jest                    | 29.5.14   | 29.5.14   |
| npm        | @types/lodash                  | 4.17.17   | 4.17.17   |
| npm        | @types/node                    | 18.19.110 | 18.19.110 |
| npm        | @types/react-router-dom        | 5.3.3     | 5.3.3     |
| npm        | @types/uuid                    | 10.0.0    | 10.0.0    |
| npm        | concurrently                   | 9.1.2     | 9.1.2     |
| npm        | copy-webpack-plugin            | 12.0.2    | 12.0.2    |
| npm        | css-loader                     | 7.1.2     | 7.1.2     |
| npm        | eslint-webpack-plugin          | 4.2.0     | 4.2.0     |
| npm        | fork-ts-checker-webpack-plugin | 9.1.0     | 9.1.0     |
| npm        | glob                           | 11.0.2    | 11.0.2    |
| npm        | jest                           | 29.7.0    | 29.7.0    |
| npm        | jest-environment-jsdom         | 29.7.0    | 29.7.0    |
| npm        | prettier                       | 3.6.2     | 3.6.2     |
| npm        | prettier                       | 3.5.3     | 3.5.3     |
| npm        | prettier                       | 3.4.2     | 3.4.2     |
| npm        | react                          | 18.3.1    | 18.3.1    |
| npm        | replace-in-file-webpack-plugin | 1.0.6     | 1.0.6     |
| npm        | rollup                         | 4.52.5    | 4.52.5    |
| npm        | rollup-plugin-dts              | 6.2.3     | 6.2.3     |
| npm        | rollup-plugin-esbuild          | 6.2.1     | 6.2.1     |
| npm        | rollup-plugin-node-externals   | 8.1.1     | 8.1.1     |
| npm        | rxjs                           | 7.8.2     | 7.8.2     |
| npm        | swc-loader                     | 0.2.6     | 0.2.6     |
| npm        | ts-node                        | 10.9.2    | 10.9.2    |
| npm        | tsconfig-paths                 | 4.2.0     | 4.2.0     |
| npm        | webpack                        | 5.99.9    | 5.99.9    |
| npm        | webpack-cli                    | 6.0.1     | 6.0.1     |
| npm        | webpack-livereload-plugin      | 3.0.2     | 3.0.2     |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/npm-release.yml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Restore go-build cache
         id: restore-go-build-cache
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ steps.go-cache-paths.outputs.go-build }}
           key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}

package.json

@@ -25,19 +25,19 @@
     "packages/grafana-llm-app"
   ],
   "devDependencies": {
-    "@grafana/eslint-config": "^8.0.0",
-    "@grafana/plugin-e2e": "^1.14.6",
+    "@grafana/eslint-config": "8.0.0",
+    "@grafana/plugin-e2e": "1.14.6",
     "@swc/core": "1.6.13",
-    "@swc/helpers": "^0.5.13",
-    "@swc/jest": "^0.2.37",
-    "@testing-library/jest-dom": "^6.1.4",
-    "@testing-library/react": "^16.1.0",
-    "@types/jest": "^29.5.14",
+    "@swc/helpers": "0.5.13",
+    "@swc/jest": "0.2.37",
+    "@testing-library/jest-dom": "6.4.2",
+    "@testing-library/react": "16.1.0",
+    "@types/jest": "29.5.14",
     "@types/testing-library__jest-dom": "5.14.8",
-    "concurrently": "^9.1.2",
-    "jest": "^29.7.0",
-    "jest-environment-jsdom": "^29.7.0",
-    "prettier": "^3.4.2",
+    "concurrently": "9.1.2",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
+    "prettier": "3.4.2",
     "typescript": "5.6.2"
   },
   "engines": {

packages/grafana-llm-app/.config/Dockerfile

@@ -1,4 +1,4 @@
-ARG grafana_version=latest
+ARG grafana_version=latest@sha256:0fa9cbdd2826d3866238a22f12330aa70f263129324509756fe0ee1b570a8e21
 ARG grafana_image=grafana-enterprise
 
 FROM grafana/${grafana_image}:${grafana_version}

packages/grafana-llm-app/docker-compose.yaml

@@ -37,7 +37,7 @@ services:
 
   # For grafana/vectorapi embedder or store
   db:
-    image: ankane/pgvector:v0.5.1
+    image: ankane/pgvector:v0.5.1@sha256:d3a9d8ac27bb7e05e333ef25b634d2625adaa85336ab729954b9e94859bf6fa7
     ports:
       - 5432:5432
     environment:
@@ -47,7 +47,7 @@ services:
 
   # For grafana/vectorapi embedder or store
   vectorapi:
-    image: grafana/vectorapi
+    image: grafana/vectorapi@sha256:318780aac2a224948857d3cd8c1c7065fad2ac72ca5b45e5af0b974f7f13f66e
     environment:
       PORT: 8889
       POSTGRES_HOST: db
@@ -61,7 +61,7 @@ services:
 
   # Playwright server for interactive development
   playwright-server:
-    image: mcr.microsoft.com/playwright:v1.52.0-noble
+    image: mcr.microsoft.com/playwright:v1.52.0-noble@sha256:a021500a801bab0611049217ffad6b9697d827205c15babb86a53bc1a61c02d5
     container_name: 'playwright-server'
     working_dir: /app
     command: sh -c "npm install --legacy-peer-deps && npx [email protected] run-server --port 5000 --host 0.0.0.0"
@@ -77,7 +77,7 @@ services:
 
   # Playwright runner for CI/automated testing
   playwright-runner:
-    image: mcr.microsoft.com/playwright:v1.52.0-noble
+    image: mcr.microsoft.com/playwright:v1.52.0-noble@sha256:a021500a801bab0611049217ffad6b9697d827205c15babb86a53bc1a61c02d5
     container_name: 'playwright-runner'
     working_dir: /app
     command: sh -c "npm install --legacy-peer-deps && echo 'Waiting for Grafana to be ready...' && until curl -f http://grafana:3000/api/health; do echo 'Waiting for Grafana...'; sleep 2; done && echo 'Grafana is ready! Starting tests...' && npx playwright test"

packages/grafana-llm-app/package.json

@@ -41,32 +41,32 @@
   "author": "Grafana",
   "license": "Apache-2.0",
   "devDependencies": {
-    "@babel/core": "^7.26.0",
-    "@grafana/plugin-e2e": "^2.0.2",
-    "@grafana/tsconfig": "^2.0.0",
-    "@playwright/test": "^1.52.0",
-    "@types/lodash": "^4.17.14",
-    "@types/node": "^18.15.11",
-    "@types/react-router-dom": "^5.3.3",
-    "copy-webpack-plugin": "^12.0.2",
+    "@babel/core": "7.27.4",
+    "@grafana/plugin-e2e": "2.0.2",
+    "@grafana/tsconfig": "2.0.0",
+    "@playwright/test": "1.52.0",
+    "@types/lodash": "4.17.17",
+    "@types/node": "18.19.110",
+    "@types/react-router-dom": "5.3.3",
+    "copy-webpack-plugin": "12.0.2",
     "cspell": "8.10.4",
-    "css-loader": "^7.1.2",
-    "eslint-webpack-plugin": "^4.2.0",
-    "fork-ts-checker-webpack-plugin": "^9.0.2",
-    "glob": "^11.0.0",
+    "css-loader": "7.1.2",
+    "eslint-webpack-plugin": "4.2.0",
+    "fork-ts-checker-webpack-plugin": "9.1.0",
+    "glob": "11.0.2",
     "identity-obj-proxy": "3.0.0",
-    "prettier": "^3.4.2",
-    "replace-in-file-webpack-plugin": "^1.0.6",
+    "prettier": "3.5.3",
+    "replace-in-file-webpack-plugin": "1.0.6",
     "sass": "1.77.6",
     "sass-loader": "14.2.1",
     "style-loader": "4.0.0",
-    "swc-loader": "^0.2.3",
-    "ts-node": "^10.9.2",
-    "tsconfig-paths": "^4.2.0",
+    "swc-loader": "0.2.6",
+    "ts-node": "10.9.2",
+    "tsconfig-paths": "4.2.0",
     "typescript": "5.6.2",
-    "webpack": "^5.97.1",
-    "webpack-cli": "^6.0.1",
-    "webpack-livereload-plugin": "^3.0.2"
+    "webpack": "5.99.9",
+    "webpack-cli": "6.0.1",
+    "webpack-livereload-plugin": "3.0.2"
   },
   "engines": {
     "node": ">=22"

packages/grafana-llm-frontend/package.json

@@ -58,18 +58,18 @@
   "author": "Grafana",
   "license": "Apache-2.0",
   "devDependencies": {
-    "@arethetypeswrong/cli": "^0.18.2",
-    "@grafana/data": "^10.4.0 || ^11 || ^12",
-    "@grafana/runtime": "^10.4.0 || ^11 || ^12",
-    "@rollup/plugin-node-resolve": "^16.0.0",
-    "@types/uuid": "^10.0.0",
-    "prettier": "^3.4.2",
-    "react": "^18",
-    "rollup": "^4.30.1",
-    "rollup-plugin-dts": "^6.1.1",
-    "rollup-plugin-esbuild": "^6.1.1",
-    "rollup-plugin-node-externals": "^8.0.0",
-    "rxjs": "^7.8.1",
+    "@arethetypeswrong/cli": "0.18.2",
+    "@grafana/data": "12.2.1",
+    "@grafana/runtime": "12.2.1",
+    "@rollup/plugin-node-resolve": "16.0.3",
+    "@types/uuid": "10.0.0",
+    "prettier": "3.6.2",
+    "react": "18.3.1",
+    "rollup": "4.52.5",
+    "rollup-plugin-dts": "6.2.3",
+    "rollup-plugin-esbuild": "6.2.1",
+    "rollup-plugin-node-externals": "8.1.1",
+    "rxjs": "7.8.2",
     "typescript": "5.6.2"
   },
   "dependencies": {