chore(deps): pin dependencies

.config/Dockerfile

@@ -1,4 +1,4 @@
-ARG grafana_version=latest
+ARG grafana_version=latest@sha256:96a793a92c9a77cf543d6e5c55100cd296ed9e22487dc3d069331364c456247b
 ARG grafana_image=grafana-enterprise
 
 FROM grafana/${grafana_image}:${grafana_version}

.github/workflows/detect-breaking-changes.yml

@@ -6,10 +6,10 @@ jobs:
   compatibilitycheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
         with: 
           persist-credentials: false
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
         with:
           node-version-file: '.nvmrc'
       - name: Install dependencies

.github/workflows/issue_commands.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Actions
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
         with:
           repository: 'grafana/grafana-github-actions'
           path: ./actions
@@ -29,7 +29,7 @@ jobs:
             AWS_DS_TOKEN_CREATOR_PEM=aws-ds-token-creator:pem
       - name: 'Generate token'
         id: generate_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2
         with:
           app-id: ${{ env.AWS_DS_TOKEN_CREATOR_ID }}
           private-key: ${{ env.AWS_DS_TOKEN_CREATOR_PEM }}

.github/workflows/publish.yaml

@@ -29,7 +29,7 @@ jobs:
       matrix:
         environment: [dev, ops, prod]
     name: CD
-    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ci-cd-workflows/v3
+    uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@ddc6565117d4fd559e0f22c4f9cf1ac76c229e14 # ci-cd-workflows/v3
     permissions:
       contents: write
       id-token: write

.github/workflows/push.yaml

@@ -11,7 +11,7 @@ permissions: {}
 jobs:
   ci:
     name: CI
-    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ci-cd-workflows/v3
+    uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@ddc6565117d4fd559e0f22c4f9cf1ac76c229e14 # ci-cd-workflows/v3
     permissions:
       contents: read
       id-token: write

.github/workflows/stale.yml

@@ -11,7 +11,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           # start from the oldest issues when performing stale operations

package.json

@@ -35,62 +35,62 @@
     "tslib": "2.8.1"
   },
   "devDependencies": {
-    "@babel/core": "^7.28.5",
-    "@eslint/eslintrc": "^3.3.1",
-    "@eslint/js": "^9.37.0",
+    "@babel/core": "7.28.5",
+    "@eslint/eslintrc": "3.3.1",
+    "@eslint/js": "9.38.0",
     "@grafana/aws-sdk": "0.8.2",
-    "@grafana/eslint-config": "^8.1.0",
-    "@grafana/plugin-e2e": "^2.2.3",
-    "@grafana/tsconfig": "^2.0.1",
+    "@grafana/eslint-config": "8.2.0",
+    "@grafana/plugin-e2e": "2.2.3",
+    "@grafana/tsconfig": "2.0.1",
     "@playwright/test": "1.54.2",
-    "@stylistic/eslint-plugin-ts": "^4.4.1",
-    "@swc/core": "^1.14.0",
-    "@swc/helpers": "^0.5.17",
-    "@swc/jest": "^0.2.39",
+    "@stylistic/eslint-plugin-ts": "4.4.1",
+    "@swc/core": "1.15.1",
+    "@swc/helpers": "0.5.17",
+    "@swc/jest": "0.2.39",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.0",
-    "@testing-library/user-event": "^14.6.0",
-    "@types/jest": "^30.0.0",
-    "@types/lodash": "^4.17.20",
-    "@types/node": "^22.18.12",
-    "@types/semver": "^7.7.1",
-    "@typescript-eslint/eslint-plugin": "^8.38.0",
-    "@typescript-eslint/parser": "^8.46.1",
-    "copy-webpack-plugin": "^13.0.1",
+    "@testing-library/user-event": "14.6.1",
+    "@types/jest": "30.0.0",
+    "@types/lodash": "4.17.20",
+    "@types/node": "22.18.12",
+    "@types/semver": "7.7.1",
+    "@typescript-eslint/eslint-plugin": "8.44.1",
+    "@typescript-eslint/parser": "8.46.2",
+    "copy-webpack-plugin": "13.0.1",
     "cspell": "9.1.5",
-    "css-loader": "^7.1.2",
-    "dotenv": "^17.2.3",
-    "eslint": "^9.37.0",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-deprecation": "^3.0.0",
-    "eslint-plugin-jsdoc": "^51.4.1",
-    "eslint-plugin-prettier": "^5.5.4",
-    "eslint-plugin-react": "^7.37.5",
-    "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-webpack-plugin": "^5.0.2",
-    "fork-ts-checker-webpack-plugin": "^9.1.0",
+    "css-loader": "7.1.2",
+    "dotenv": "17.2.3",
+    "eslint": "9.38.0",
+    "eslint-config-prettier": "10.1.8",
+    "eslint-plugin-deprecation": "3.0.0",
+    "eslint-plugin-jsdoc": "51.4.1",
+    "eslint-plugin-prettier": "5.5.4",
+    "eslint-plugin-react": "7.37.5",
+    "eslint-plugin-react-hooks": "5.2.0",
+    "eslint-webpack-plugin": "5.0.2",
+    "fork-ts-checker-webpack-plugin": "9.1.0",
     "glob": "^11.0.3",
     "identity-obj-proxy": "3.0.0",
-    "imports-loader": "^5.0.0",
-    "jest": "^30.2.0",
-    "jest-environment-jsdom": "^30.1.2",
-    "lefthook": "^1.13.6",
-    "prettier": "^3.6.2",
-    "react-select-event": "^5.3.0",
-    "replace-in-file-webpack-plugin": "^1.0.6",
+    "imports-loader": "5.0.0",
+    "jest": "30.2.0",
+    "jest-environment-jsdom": "30.1.2",
+    "lefthook": "1.13.6",
+    "prettier": "3.6.2",
+    "react-select-event": "5.5.1",
+    "replace-in-file-webpack-plugin": "1.0.6",
     "sass": "1.92.1",
     "sass-loader": "16.0.6",
     "style-loader": "4.0.0",
-    "swc-loader": "^0.2.3",
-    "terser-webpack-plugin": "^5.3.14",
-    "ts-node": "^10.9.2",
-    "tsconfig-paths": "^4.2.0",
+    "swc-loader": "0.2.6",
+    "terser-webpack-plugin": "5.3.14",
+    "ts-node": "10.9.2",
+    "tsconfig-paths": "4.2.0",
     "typescript": "5.9.3",
-    "webpack": "^5.101.3",
-    "webpack-cli": "^6.0.1",
-    "webpack-livereload-plugin": "^3.0.2",
-    "webpack-subresource-integrity": "^5.1.0",
-    "webpack-virtual-modules": "^0.6.2"
+    "webpack": "5.101.3",
+    "webpack-cli": "6.0.1",
+    "webpack-livereload-plugin": "3.0.2",
+    "webpack-subresource-integrity": "5.1.0",
+    "webpack-virtual-modules": "0.6.2"
   },
   "engines": {
     "node": ">=20"