From 8be18a8a2022b04fd28775ce763a00346efddc98 Mon Sep 17 00:00:00 2001
From: "renovate-sh-app[bot]"
 <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 21:05:59 +0000
Subject: [PATCH] chore(deps): pin dependencies

| datasource | package      | from    | to      |
| ---------- | ------------ | ------- | ------- |
| npm        | autoprefixer | 10.4.21 | 10.4.21 |
| npm        | postcss      | 8.5.6   | 8.5.6   |
| npm        | postcss-cli  | 10.1.0  | 10.1.0  |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
---
 .github/workflows/release.yaml                        |  4 ++--
 config/manager/kustomization.yaml                     |  2 +-
 deploy/kustomize/base/kustomization.yaml              |  2 +-
 .../overlays/chainsaw-debug/kustomization.yaml        |  2 +-
 .../overlays/cluster_scoped/kustomization.yaml        |  2 +-
 hugo/package-lock.json                                | 11 ++++++++---
 hugo/package.json                                     |  6 +++---
 7 files changed, 17 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e2ec8739d..f68fa3844 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -243,7 +243,7 @@ jobs:
           # For example: add custom metadata, vulnerability scan results, etc.
 
       - name: Upload SBOMs as artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: sboms
           path: ./sboms/
@@ -269,7 +269,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Download SBOMs
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
         with:
           name: sboms
           path: ./sboms/
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index e995e200f..505ee860b 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -15,4 +15,4 @@ configMapGenerator:
 images:
 - name: controller
   newName: ghcr.io/grafana/grafana-operator
-  newTag: v5.8.1
+  newTag: v5.8.1@sha256:34229f59e1609764196870aa2672aa1b784e88583ec445ff04e810a8333b72a7
diff --git a/deploy/kustomize/base/kustomization.yaml b/deploy/kustomize/base/kustomization.yaml
index d790b5b5e..79ec3382b 100644
--- a/deploy/kustomize/base/kustomization.yaml
+++ b/deploy/kustomize/base/kustomization.yaml
@@ -15,4 +15,4 @@ patches:
         value: grafana-operator-permissions
 images:
   - name: ghcr.io/grafana/grafana-operator
-    newTag: v5.20.0
+    newTag: v5.20.0@sha256:050174c79c5bfce80fb96769e48026a905057202fb089b66457fa67f272d683e
diff --git a/deploy/kustomize/overlays/chainsaw-debug/kustomization.yaml b/deploy/kustomize/overlays/chainsaw-debug/kustomization.yaml
index 880a166cd..ed2035b4c 100644
--- a/deploy/kustomize/overlays/chainsaw-debug/kustomization.yaml
+++ b/deploy/kustomize/overlays/chainsaw-debug/kustomization.yaml
@@ -7,7 +7,7 @@ kind: Kustomization
 images:
   - name: ko.local/grafana/grafana-operator
     newName: hashicorp/http-echo
-    newTag: latest
+    newTag: latest@sha256:fcb75f691c8b0414d670ae570240cbf95502cc18a9ba57e982ecac589760a186
 
 patches:
   - path: deployment-patch.yaml
diff --git a/deploy/kustomize/overlays/cluster_scoped/kustomization.yaml b/deploy/kustomize/overlays/cluster_scoped/kustomization.yaml
index f5fc29861..2827b15aa 100644
--- a/deploy/kustomize/overlays/cluster_scoped/kustomization.yaml
+++ b/deploy/kustomize/overlays/cluster_scoped/kustomization.yaml
@@ -7,4 +7,4 @@ kind: Kustomization
 images:
 - name: ghcr.io/grafana/grafana-operator
   newName: ghcr.io/grafana/grafana-operator
-  newTag: v5.18.0
+  newTag: v5.18.0@sha256:0af2faec9d6f40e0d01077b3da859f7687144c3aeab05ec07a4556ab37081fbd
diff --git a/hugo/package-lock.json b/hugo/package-lock.json
index 57c7817b8..8eae9d986 100644
--- a/hugo/package-lock.json
+++ b/hugo/package-lock.json
@@ -5,9 +5,9 @@
   "packages": {
     "": {
       "devDependencies": {
-        "autoprefixer": "^10.4.21",
-        "postcss": "^8.5.6",
-        "postcss-cli": "^10.1.0"
+        "autoprefixer": "10.4.21",
+        "postcss": "8.5.6",
+        "postcss-cli": "10.1.0"
       }
     },
     "node_modules/@nodelib/fs.scandir": {
@@ -101,6 +101,7 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "dependencies": {
         "browserslist": "^4.24.4",
         "caniuse-lite": "^1.0.30001702",
@@ -162,6 +163,7 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "peer": true,
       "dependencies": {
         "caniuse-lite": "^1.0.30001726",
         "electron-to-chromium": "^1.5.173",
@@ -644,6 +646,8 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
         "nanoid": "^3.3.11",
         "picocolors": "^1.1.1",
@@ -658,6 +662,7 @@
       "resolved": "https://registry.npmjs.org/postcss-cli/-/postcss-cli-10.1.0.tgz",
       "integrity": "sha512-Zu7PLORkE9YwNdvOeOVKPmWghprOtjFQU3srMUGbdz3pHJiFh7yZ4geiZFMkjMfB0mtTFR3h8RemR62rPkbOPA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "chokidar": "^3.3.0",
         "dependency-graph": "^0.11.0",
diff --git a/hugo/package.json b/hugo/package.json
index d15f47ca2..1daebec3b 100644
--- a/hugo/package.json
+++ b/hugo/package.json
@@ -1,7 +1,7 @@
 {
   "devDependencies": {
-    "autoprefixer": "^10.4.21",
-    "postcss": "^8.5.6",
-    "postcss-cli": "^10.1.0"
+    "autoprefixer": "10.4.21",
+    "postcss": "8.5.6",
+    "postcss-cli": "10.1.0"
   }
 }