fix(deps): pin dependencies

renovate[bot] · web-flow · commit 3017affcda49 · 2025-12-31T00:33:44.000Z
diff --git a/.github/workflows/monitor_waf_deploy.yml b/.github/workflows/monitor_waf_deploy.yml
@@ -27,10 +27,10 @@ jobs:
         working-directory: sam/waf_rule
     timeout-minutes: 5
     steps: # ref:https://docs.aws.amazon.com/ja_jp/serverless-application-model/latest/developerguide/deploying-using-github.html
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-      - uses: aws-actions/setup-sam@v2
-      - uses: aws-actions/configure-aws-credentials@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: aws-actions/setup-sam@c71dd89d980e49367c70391e8ada4353f52f2800 # v2
+      - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
         with:
           aws-region: ${{env.AWS_REGION}}
           role-to-assume: ${{ env.IAM_ROLE_ARN }}
@@ -40,10 +40,10 @@ jobs:
       - run: sam deploy --no-confirm-changeset --no-fail-on-empty-changeset
 
         name: sam update
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-      - uses: aws-actions/setup-sam@v2
-      - uses: aws-actions/configure-aws-credentials@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: aws-actions/setup-sam@c71dd89d980e49367c70391e8ada4353f52f2800 # v2
+      - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
         with:
           aws-region: ${{env.AWS_REGION}}
           role-to-assume: ${{ env.IAM_ROLE_ARN }}
diff --git a/.github/workflows/s3_conversion.yaml b/.github/workflows/s3_conversion.yaml
@@ -28,24 +28,24 @@ jobs:
         working-directory: sam/s3-conversion
     timeout-minutes: 60
     steps: # ref:https://docs.aws.amazon.com/ja_jp/serverless-application-model/latest/developerguide/deploying-using-github.html
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
 
-      - uses: actions/cache@v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}
 
       # SAMビルドのキャッシュ
-      - uses: actions/cache@v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: .aws-sam/build
           key: ${{ runner.os }}-sam-build-${{ hashFiles('**/*.py') }}
 
-      - uses: aws-actions/setup-sam@v2
+      - uses: aws-actions/setup-sam@c71dd89d980e49367c70391e8ada4353f52f2800 # v2
 
-      - uses: aws-actions/configure-aws-credentials@v4
+      - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
         with:
           aws-region: ${{env.AWS_REGION}}
           role-to-assume: ${{ env.IAM_ROLE_ARN }}
diff --git a/cdk/ec2/requirements.txt b/cdk/ec2/requirements.txt
@@ -1,2 +1,2 @@
 aws-cdk-lib==2.233.0
-constructs>=10.0.0,<11.0.0
+constructs==10.4.4
diff --git a/sam/python/daily-cost-notify/Pipfile b/sam/python/daily-cost-notify/Pipfile
@@ -4,10 +4,10 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-black = ">=24.10.0"
-isort = ">=5.13.2"
-flake8 = ">=7.1.1"
-mypy = ">=1.13.0"
+black = "==25.12.0"
+isort = "==7.0.0"
+flake8 = "==7.3.0"
+mypy = "==1.19.1"
 boto3 = "*"
 holidays = "*"
 requests = "*"
diff --git a/sam/python/daily-cost-notify/Pipfile.lock b/sam/python/daily-cost-notify/Pipfile.lock
diff --git a/sam/python/daily-cost-notify/function/requirements.txt b/sam/python/daily-cost-notify/function/requirements.txt
@@ -1,7 +1,7 @@
-boto3 >= 1.34.153
-requests >= 2.32.3
-black >= 24.10.0
-isort >= 5.13.2
-flake8 >= 7.1.1
-mypy >= 1.13.0
-holidays>=0.71
+boto3 ==1.42.19
+requests ==2.32.5
+black ==25.12.0
+isort ==7.0.0
+flake8 ==7.3.0
+mypy ==1.19.1
+holidays==0.87
diff --git a/sam/python/daily_const_notify/function/requirements.txt b/sam/python/daily_const_notify/function/requirements.txt
@@ -1,4 +1,4 @@
-boto3 >= 1.34.153
-requests >= 2.32.3
-holidays>=0.71
-slack-sdk >= 3.37.0
+boto3 ==1.42.19
+requests ==2.32.5
+holidays==0.87
+slack-sdk ==3.39.0
diff --git a/sam/python/monitor-waf/requirements.txt b/sam/python/monitor-waf/requirements.txt
@@ -1,6 +1,6 @@
-boto3 >= 1.34.153
-requests >= 2.32.3
-black >= 24.10.0
-isort >= 5.13.2
-flake8 >= 7.1.1
-mypy >= 1.13.0
+boto3 ==1.42.19
+requests ==2.32.5
+black ==25.12.0
+isort ==7.0.0
+flake8 ==7.3.0
+mypy ==1.19.1
diff --git a/sam/python/monitor_ecs_capacity_provider/Pipfile b/sam/python/monitor_ecs_capacity_provider/Pipfile
@@ -4,11 +4,11 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-requests = ">=2.32.3"
-black = ">=24.10.0"
-isort = ">=5.13.2"
-flake8 = ">=7.1.1"
-mypy = ">=1.13.0"
+requests = "==2.32.5"
+black = "==25.12.0"
+isort = "==7.0.0"
+flake8 = "==7.3.0"
+mypy = "==1.19.1"
 pyyaml = "*"
 boto3 = "*"
 holidays = "*"
diff --git a/sam/python/monitor_ecs_capacity_provider/Pipfile.lock b/sam/python/monitor_ecs_capacity_provider/Pipfile.lock
diff --git a/sam/python/monitor_ecs_capacity_provider/function/requirements.txt b/sam/python/monitor_ecs_capacity_provider/function/requirements.txt
@@ -1,8 +1,8 @@
-boto3 >= 1.34.153
-requests >= 2.32.3
-black >= 24.10.0
-isort >= 5.13.2
-flake8 >= 7.1.1
-mypy >= 1.13.0
-PyYAML >= 6.0.2
-holidays >= 0.67
+boto3 ==1.42.19
+requests ==2.32.5
+black ==25.12.0
+isort ==7.0.0
+flake8 ==7.3.0
+mypy ==1.19.1
+PyYAML ==6.0.3
+holidays ==0.87
diff --git a/sam/python/test-resource/hello-world/Dockerfile b/sam/python/test-resource/hello-world/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/nodejs:20
+FROM public.ecr.aws/lambda/nodejs:20@sha256:c9db858f1061d1662d081a7d3fe30e1c9cf8dd4eb658f60ab34cc8ebe8f939a0
 
 COPY app.mjs package*.json ./
 
diff --git a/sam/python/test-resource/hello-world/package.json b/sam/python/test-resource/hello-world/package.json
@@ -7,13 +7,13 @@
   "author": "SAM CLI",
   "license": "MIT",
   "dependencies": {
-    "axios": ">=1.6.0"
+    "axios": "1.13.2"
   },
   "scripts": {
     "test": "mocha tests/unit/"
   },
   "devDependencies": {
-    "chai": "^4.3.6",
-    "mocha": "^10.2.0"
+    "chai": "4.5.0",
+    "mocha": "10.8.2"
   }
 }
diff --git a/sam/python/waf_rule/function/requirements.txt b/sam/python/waf_rule/function/requirements.txt
@@ -1,2 +1,2 @@
-boto3 >= 1.34.153
-requests >= 2.32.3
+boto3 ==1.42.19
+requests ==2.32.5
diff --git a/sam/ts/apple-notify/hello-world/package.json b/sam/ts/apple-notify/hello-world/package.json
@@ -13,22 +13,22 @@
     "test": "npm run compile && npm run unit"
   },
   "dependencies": {
-    "esbuild": "^0.27.0"
+    "esbuild": "0.27.2"
   },
   "devDependencies": {
-    "@types/aws-lambda": "^8.10.92",
-    "@types/jest": "^29.2.0",
-    "@jest/globals": "^29.2.0",
-    "@types/node": "^20.5.7",
-    "@typescript-eslint/eslint-plugin": "^5.10.2",
-    "@typescript-eslint/parser": "^5.10.2",
-    "eslint": "^8.8.0",
-    "eslint-config-prettier": "^8.3.0",
-    "eslint-plugin-prettier": "^4.0.0",
-    "jest": "^29.2.1",
-    "prettier": "^2.5.1",
-    "ts-jest": "^29.0.5",
-    "ts-node": "^10.9.1",
-    "typescript": "^4.8.4"
+    "@types/aws-lambda": "8.10.159",
+    "@types/jest": "29.5.14",
+    "@jest/globals": "29.7.0",
+    "@types/node": "20.19.27",
+    "@typescript-eslint/eslint-plugin": "5.62.0",
+    "@typescript-eslint/parser": "5.62.0",
+    "eslint": "8.57.1",
+    "eslint-config-prettier": "8.10.2",
+    "eslint-plugin-prettier": "4.2.5",
+    "jest": "29.7.0",
+    "prettier": "2.8.8",
+    "ts-jest": "29.4.6",
+    "ts-node": "10.9.2",
+    "typescript": "4.9.5"
   }
 }
diff --git a/sam/ts/hello-world/src/package.json b/sam/ts/hello-world/src/package.json
@@ -13,22 +13,22 @@
     "test": "npm run compile && npm run unit"
   },
   "dependencies": {
-    "esbuild": "^0.27.0"
+    "esbuild": "0.27.2"
   },
   "devDependencies": {
-    "@types/aws-lambda": "^8.10.92",
-    "@types/jest": "^29.2.0",
-    "@jest/globals": "^29.2.0",
-    "@types/node": "^20.5.7",
-    "@typescript-eslint/eslint-plugin": "^5.10.2",
-    "@typescript-eslint/parser": "^5.10.2",
-    "eslint": "^8.8.0",
-    "eslint-config-prettier": "^8.3.0",
-    "eslint-plugin-prettier": "^4.0.0",
-    "jest": "^29.2.1",
-    "prettier": "^2.5.1",
-    "ts-jest": "^29.0.5",
-    "ts-node": "^10.9.1",
-    "typescript": "^4.8.4"
+    "@types/aws-lambda": "8.10.159",
+    "@types/jest": "29.5.14",
+    "@jest/globals": "29.7.0",
+    "@types/node": "20.19.27",
+    "@typescript-eslint/eslint-plugin": "5.62.0",
+    "@typescript-eslint/parser": "5.62.0",
+    "eslint": "8.57.1",
+    "eslint-config-prettier": "8.10.2",
+    "eslint-plugin-prettier": "4.2.5",
+    "jest": "29.7.0",
+    "prettier": "2.8.8",
+    "ts-jest": "29.4.6",
+    "ts-node": "10.9.2",
+    "typescript": "4.9.5"
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`aws-cdk-lib==2.233.0`
`2`		`-constructs>=10.0.0,<11.0.0`
	`2`	`+constructs==10.4.4`