fix(deps): pin dependencies (#1878)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@formkit/auto-animate](https://redirect.github.com/formkit/auto-animate) | dependencies | pin | [`^0.9.0` → `0.9.0`](https://renovatebot.com/diffs/npm/@formkit%2fauto-animate/0.9.0/0.9.0) | | [@tanstack/vue-table](https://tanstack.com/table) ([source](https://redirect.github.com/TanStack/table/tree/HEAD/packages/vue-table)) | dependencies | pin | [`^8.21.3` → `8.21.3`](https://renovatebot.com/diffs/npm/@tanstack%2fvue-table/8.21.3/8.21.3) | | [@types/nunjucks](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/nunjucks) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nunjucks)) | devDependencies | pin | [`^3.2.6` → `3.2.6`](https://renovatebot.com/diffs/npm/@types%2fnunjucks/3.2.6/3.2.6) | | [@vvo/tzdb](https://redirect.github.com/vvo/tzdb) | dependencies | pin | [`^6.186.0` → `6.186.0`](https://renovatebot.com/diffs/npm/@vvo%2ftzdb/6.186.0/6.186.0) | | [fast-xml-parser](https://redirect.github.com/NaturalIntelligence/fast-xml-parser) | dependencies | pin | [`^5.3.0` → `5.3.0`](https://renovatebot.com/diffs/npm/fast-xml-parser/5.3.0/5.3.0) | | [html-entities](https://redirect.github.com/mdevils/html-entities) | dependencies | pin | [`^2.6.0` → `2.6.0`](https://renovatebot.com/diffs/npm/html-entities/2.6.0/2.6.0) | | [node](https://redirect.github.com/actions/node-versions) | uses-with | pin | `20` → `20.20.0` | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/unraid/api).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 07:21:32 -05:00 · 2026-03-02 15:11:09 -05:00
parent 0bc7498ea0
commit db88eb8ca9
5 changed files with 29 additions and 20 deletions
--- a/.github/workflows/generate-release-notes.yml
+++ b/.github/workflows/generate-release-notes.yml
@@ -40,7 +40,7 @@ jobs:
      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: '20'
+          node-version: '20.20.0'

      - name: Generate Release Notes
        id: generate_notes
--- a/.github/workflows/manual-release.yml
+++ b/.github/workflows/manual-release.yml
@@ -40,7 +40,7 @@ jobs:
      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: '20'
+          node-version: '20.20.0'

      - name: Check and Update Package Versions
        run: |
--- a/api/package.json
+++ b/api/package.json
@@ -106,7 +106,7 @@
        "escape-html": "1.0.3",
        "execa": "9.6.0",
        "exit-hook": "4.0.0",
-        "fast-xml-parser": "^5.3.0",
+        "fast-xml-parser": "5.3.0",
        "fastify": "5.5.0",
        "filenamify": "7.0.0",
        "fs-extra": "11.3.1",
@@ -119,7 +119,7 @@
        "graphql-subscriptions": "3.0.0",
        "graphql-tag": "2.12.6",
        "graphql-ws": "6.0.6",
-        "html-entities": "^2.6.0",
+        "html-entities": "2.6.0",
        "ini": "5.0.0",
        "ip": "2.0.1",
        "jose": "6.0.13",
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -188,7 +188,7 @@ importers:
        specifier: 4.0.0
        version: 4.0.0
      fast-xml-parser:
-        specifier: ^5.3.0
+        specifier: 5.3.0
        version: 5.3.0
      fastify:
        specifier: 5.5.0
@@ -227,7 +227,7 @@ importers:
        specifier: 6.0.6
        version: 6.0.6(crossws@0.3.5)(graphql@16.11.0)(ws@8.18.3)
      html-entities:
-        specifier: ^2.6.0
+        specifier: 2.6.0
        version: 2.6.0
      ini:
        specifier: 5.0.0
@@ -1071,7 +1071,7 @@ importers:
        specifier: 1.1.9
        version: 1.1.9(vue@3.5.20(typescript@5.9.2))
      '@formkit/auto-animate':
-        specifier: ^0.9.0
+        specifier: 0.9.0
        version: 0.9.0
      '@headlessui/vue':
        specifier: 1.7.23
@@ -1095,7 +1095,7 @@ importers:
        specifier: 4.0.0-alpha.0
        version: 4.0.0-alpha.0(@babel/parser@7.28.4)(@netlify/blobs@9.1.2)(change-case@5.4.4)(db0@0.3.2)(embla-carousel@8.6.0)(focus-trap@7.6.5)(ioredis@5.7.0)(jwt-decode@4.0.0)(magicast@0.3.5)(react-dom@19.1.0(react@19.1.0))(react@19.1.0)(typescript@5.9.2)(vite@7.1.3(@types/node@22.18.0)(jiti@2.5.1)(lightningcss@1.30.1)(stylus@0.57.0)(terser@5.43.1)(tsx@4.20.5)(yaml@2.8.1))(vue-router@4.5.1(vue@3.5.20(typescript@5.9.2)))(vue@3.5.20(typescript@5.9.2))(zod@3.25.76)
      '@tanstack/vue-table':
-        specifier: ^8.21.3
+        specifier: 8.21.3
        version: 8.21.3(vue@3.5.20(typescript@5.9.2))
      '@unraid/shared-callbacks':
        specifier: 3.0.0
@@ -1113,7 +1113,7 @@ importers:
        specifier: 13.8.0
        version: 13.8.0(change-case@5.4.4)(focus-trap@7.6.5)(fuse.js@7.1.0)(jwt-decode@4.0.0)(vue@3.5.20(typescript@5.9.2))
      '@vvo/tzdb':
-        specifier: ^6.186.0
+        specifier: 6.186.0
        version: 6.186.0
      ajv:
        specifier: 8.17.1
@@ -1240,7 +1240,7 @@ importers:
        specifier: 22.18.0
        version: 22.18.0
      '@types/nunjucks':
-        specifier: ^3.2.6
+        specifier: 3.2.6
        version: 3.2.6
      '@types/semver':
        specifier: 7.7.0
@@ -1445,7 +1445,7 @@ packages:
  '@apollo/server@4.12.2':
    resolution: {integrity: sha512-jKRlf+sBMMdKYrjMoiWKne42Eb6paBfDOr08KJnUaeaiyWFj+/040FjVPQI7YGLfdwnYIsl1NUUqS2UdgezJDg==}
    engines: {node: '>=14.16.0'}
-    deprecated: Apollo Server v4 is deprecated and will transition to end-of-life on January 26, 2026. As long as you are already using a non-EOL version of Node.js, upgrading to v5 should take only a few minutes. See https://www.apollographql.com/docs/apollo-server/previous-versions for details.
+    deprecated: Apollo Server v4 is end-of-life since January 26, 2026. As long as you are already using a non-EOL version of Node.js, upgrading to v5 should take only a few minutes. See https://www.apollographql.com/docs/apollo-server/previous-versions for details.
    peerDependencies:
      graphql: 16.11.0

@@ -6077,6 +6077,7 @@ packages:
  basic-ftp@5.0.5:
    resolution: {integrity: sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg==}
    engines: {node: '>=10.0.0'}
+    deprecated: Security vulnerability fixed in 5.2.0, please upgrade

  bcrypt-pbkdf@1.0.2:
    resolution: {integrity: sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==}
@@ -6876,6 +6877,7 @@ packages:

  deep-diff@1.0.2:
    resolution: {integrity: sha512-aWS3UIVH+NPGCD1kki+DCU9Dua032iSsO43LqQpcs4R3+dVv7tX0qBGjiVHJHjplsoUM2XRO/KB92glqc68awg==}
+    deprecated: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.

  deep-eql@5.0.2:
    resolution: {integrity: sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==}
@@ -8066,16 +8068,18 @@ packages:

  glob@10.4.5:
    resolution: {integrity: sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    hasBin: true

  glob@11.0.3:
    resolution: {integrity: sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==}
    engines: {node: 20 || >=22}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    hasBin: true

  glob@7.2.3:
    resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
-    deprecated: Glob versions prior to v9 are no longer supported
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me

  global-agent@3.0.0:
    resolution: {integrity: sha512-PT6XReJ+D07JvGoxQMkT6qji/jVNfX/h364XHZOWeRzy64sSFr+xJ5OX7LI3b4MPQzdL4H8Y8M0xzPpsVMwA8Q==}
@@ -11550,6 +11554,7 @@ packages:
  tar@7.4.3:
    resolution: {integrity: sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==}
    engines: {node: '>=18'}
+    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me

  terser@5.43.1:
    resolution: {integrity: sha512-+6erLbBm0+LROX2sPXlUYx/ux5PyE9K/a92Wrt6oA+WDAoFTdpHE5tCYCI5PNzq2y8df4rA+QgHLJuR4jNymsg==}
@@ -11963,6 +11968,7 @@ packages:

  unplugin-vue-router@0.15.0:
    resolution: {integrity: sha512-PyGehCjd9Ny9h+Uer4McbBjjib3lHihcyUEILa7pHKl6+rh8N7sFyw4ZkV+N30Oq2zmIUG7iKs3qpL0r+gXAaQ==}
+    deprecated: 'Merged into vuejs/router. Migrate: https://router.vuejs.org/guide/migration/v4-to-v5.html'
    peerDependencies:
      '@vue/compiler-sfc': ^3.5.17
      vue-router: ^4.5.1
@@ -12460,8 +12466,8 @@ packages:
  vue-component-type-helpers@3.0.6:
    resolution: {integrity: sha512-6CRM8X7EJqWCJOiKPvSLQG+hJPb/Oy2gyJx3pLjUEhY7PuaCthQu3e0zAGI1lqUBobrrk9IT0K8sG2GsCluxoQ==}

-  vue-component-type-helpers@3.1.5:
-    resolution: {integrity: sha512-7V3yJuNWW7/1jxCcI1CswnpDsvs02Qcx/N43LkV+ZqhLj2PKj50slUflHAroNkN4UWiYfzMUUUXiNuv9khmSpQ==}
+  vue-component-type-helpers@3.2.5:
+    resolution: {integrity: sha512-tkvNr+bU8+xD/onAThIe7CHFvOJ/BO6XCOrxMzeytJq40nTfpGDJuVjyCM8ccGZKfAbGk2YfuZyDMXM56qheZQ==}

  vue-demi@0.14.10:
    resolution: {integrity: sha512-nMZBOwuzabUO0nLgIcc6rycZEebF6eeUfaiQx9+WSk8e29IbLvPU9feI6tqW4kTo3hvoYAJkMh8n8D0fuISphg==}
@@ -12495,6 +12501,7 @@ packages:
  vue-i18n@11.1.11:
    resolution: {integrity: sha512-LvyteQoXeQiuILbzqv13LbyBna/TEv2Ha+4ZWK2AwGHUzZ8+IBaZS0TJkCgn5izSPLcgZwXy9yyTrewCb2u/MA==}
    engines: {node: '>= 16'}
+    deprecated: This version is NOT deprecated. Previous deprecation was a mistake.
    peerDependencies:
      vue: ^3.0.0

@@ -12585,10 +12592,12 @@ packages:
  whatwg-encoding@2.0.0:
    resolution: {integrity: sha512-p41ogyeMUrw3jWclHWTQg1k05DSVXPLcVxRTYsXUk+ZooOCZLcoYgPZ/HL/D/N+uQPOtcp1me1WhBEaX02mhWg==}
    engines: {node: '>=12'}
+    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation

  whatwg-encoding@3.1.1:
    resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
    engines: {node: '>=18'}
+    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation

  whatwg-mimetype@3.0.0:
    resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
@@ -16528,7 +16537,7 @@ snapshots:
      storybook: 9.1.3(@testing-library/dom@10.4.0)(prettier@3.6.2)(vite@7.1.3(@types/node@22.18.0)(jiti@2.5.1)(lightningcss@1.30.1)(stylus@0.57.0)(terser@5.43.1)(tsx@4.20.5)(yaml@2.8.1))
      type-fest: 2.19.0
      vue: 3.5.20(typescript@5.9.2)
-      vue-component-type-helpers: 3.1.5
+      vue-component-type-helpers: 3.2.5

  '@swc/core-darwin-arm64@1.13.5':
    optional: true
@@ -25374,7 +25383,7 @@ snapshots:

  vue-component-type-helpers@3.0.6: {}

-  vue-component-type-helpers@3.1.5: {}
+  vue-component-type-helpers@3.2.5: {}

  vue-demi@0.14.10(vue@3.5.20(typescript@5.9.2)):
    dependencies:
--- a/web/package.json
+++ b/web/package.json
@@ -59,7 +59,7 @@
    "@types/crypto-js": "4.2.2",
    "@types/eslint-config-prettier": "6.11.3",
    "@types/node": "22.18.0",
-    "@types/nunjucks": "^3.2.6",
+    "@types/nunjucks": "3.2.6",
    "@types/semver": "7.7.0",
    "@typescript-eslint/eslint-plugin": "8.41.0",
    "@unraid/tailwind-rem-to-rem": "2.0.0",
@@ -103,7 +103,7 @@
    "@floating-ui/dom": "1.7.4",
    "@floating-ui/utils": "0.2.10",
    "@floating-ui/vue": "1.1.9",
-    "@formkit/auto-animate": "^0.9.0",
+    "@formkit/auto-animate": "0.9.0",
    "@headlessui/vue": "1.7.23",
    "@heroicons/vue": "2.2.0",
    "@jsonforms/core": "3.6.0",
@@ -111,13 +111,13 @@
    "@jsonforms/vue-vanilla": "3.6.0",
    "@jsonforms/vue-vuetify": "3.6.0",
    "@nuxt/ui": "4.0.0-alpha.0",
-    "@tanstack/vue-table": "^8.21.3",
+    "@tanstack/vue-table": "8.21.3",
    "@unraid/shared-callbacks": "3.0.0",
    "@unraid/ui": "link:../unraid-ui",
    "@vue/apollo-composable": "4.2.2",
    "@vueuse/components": "13.8.0",
    "@vueuse/integrations": "13.8.0",
-    "@vvo/tzdb": "^6.186.0",
+    "@vvo/tzdb": "6.186.0",
    "ajv": "8.17.1",
    "ansi_up": "6.0.6",
    "class-variance-authority": "0.7.1",