chore(deps): pin dependencies

| datasource | package                          | from    | to      |
| ---------- | -------------------------------- | ------- | ------- |
| npm        | @babel/core                      | 7.28.4  | 7.28.4  |
| npm        | @grafana/eslint-config           | 8.2.0   | 8.2.0   |
| npm        | @grafana/plugin-e2e              | 3.1.1   | 3.1.1   |
| npm        | @grafana/tsconfig                | 2.0.0   | 2.0.0   |
| npm        | @playwright/test                 | 1.57.0  | 1.57.0  |
| npm        | @stylistic/eslint-plugin-ts      | 4.4.1   | 4.4.1   |
| npm        | @swc/core                        | 1.13.5  | 1.13.5  |
| npm        | @swc/helpers                     | 0.5.17  | 0.5.17  |
| npm        | @swc/jest                        | 0.2.39  | 0.2.39  |
| npm        | @testing-library/dom             | 10.4.1  | 10.4.1  |
| npm        | @testing-library/react           | 16.3.0  | 16.3.0  |
| npm        | @testing-library/user-event      | 14.6.1  | 14.6.1  |
| npm        | @types/glob                      | 8.1.0   | 8.1.0   |
| npm        | @types/jest                      | 29.5.14 | 29.5.14 |
| npm        | @types/lodash                    | 4.17.21 | 4.17.21 |
| npm        | @types/node                      | 24.8.0  | 24.8.0  |
| npm        | @types/react-router-dom          | 5.3.3   | 5.3.3   |
| npm        | @types/semver                    | 7.7.1   | 7.7.1   |
| npm        | @types/webpack-livereload-plugin | 2.3.6   | 2.3.6   |
| npm        | @typescript-eslint/eslint-plugin | 8.50.0  | 8.50.0  |
| npm        | @typescript-eslint/parser        | 8.52.0  | 8.52.0  |
| npm        | copy-webpack-plugin              | 12.0.2  | 12.0.2  |
| npm        | cspell                           | 9.4.0   | 9.4.0   |
| npm        | css-loader                       | 7.1.2   | 7.1.2   |
| npm        | eslint                           | 9.39.2  | 9.39.2  |
| npm        | eslint-config-prettier           | 8.8.0   | 8.8.0   |
| npm        | eslint-plugin-jsdoc              | 61.5.0  | 61.5.0  |
| npm        | eslint-plugin-react              | 7.37.5  | 7.37.5  |
| npm        | eslint-plugin-react-hooks        | 5.2.0   | 5.2.0   |
| npm        | eslint-webpack-plugin            | 5.0.2   | 5.0.2   |
| npm        | fork-ts-checker-webpack-plugin   | 9.1.0   | 9.1.0   |
| npm        | glob                             | 11.1.0  | 11.1.0  |
| npm        | imports-loader                   | 5.0.0   | 5.0.0   |
| npm        | jest                             | 29.7.0  | 29.7.0  |
| npm        | jest-environment-jsdom           | 29.7.0  | 29.7.0  |
| npm        | prettier                         | 3.7.4   | 3.7.4   |
| npm        | replace-in-file-webpack-plugin   | 1.0.6   | 1.0.6   |
| npm        | swc-loader                       | 0.2.6   | 0.2.6   |
| npm        | terser-webpack-plugin            | 5.3.16  | 5.3.16  |
| npm        | ts-node                          | 10.9.2  | 10.9.2  |
| npm        | tsconfig-paths                   | 4.2.0   | 4.2.0   |
| npm        | webpack                          | 5.104.1 | 5.104.1 |
| npm        | webpack-cli                      | 5.1.4   | 5.1.4   |
| npm        | webpack-livereload-plugin        | 3.0.2   | 3.0.2   |
| npm        | webpack-subresource-integrity    | 5.1.0   | 5.1.0   |
| npm        | webpack-virtual-modules          | 0.6.2   | 0.6.2   |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.config/Dockerfile

@@ -1,4 +1,4 @@
-ARG grafana_version=latest
+ARG grafana_version=latest@sha256:703b4a3aff457041dcbd15bf36dbc8bb83cb513b72b0912056985712be4c01bd
 ARG grafana_image=grafana-enterprise
 
 FROM grafana/${grafana_image}:${grafana_version}

.github/workflows/cron.yml

@@ -26,14 +26,14 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           # Avoid leaving a token in the repo checkout; prefer explicit auth for publishing steps
           persist-credentials: false
 
       - name: Get secrets from Vault
         id: get-secrets
-        uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0
+        uses: grafana/shared-workflows/actions/get-vault-secrets@a37de51f3d713a30a9e4b21bcdfbd38170020593 # get-vault-secrets/v1.3.0
         with:
           # Grafana auth (used by @grafana/plugin-e2e)
           # + Prometheus creds for Bench metrics reporting
@@ -55,7 +55,7 @@ jobs:
           export_env: false
 
       - name: Wait for Grafana to be reachable
-        uses: grafana/plugin-actions/wait-for-grafana@wait-for-grafana/v1.0.2
+        uses: grafana/plugin-actions/wait-for-grafana@c8ad89b7d81f8cb9967bb65e444d85f5b3d7c674 # wait-for-grafana/v1.0.2
         with:
           # Use /login so “reachable” also implies the app is up
           url: "https://datasourcese2e.grafana-dev.net/login"

.github/workflows/detect-breaking-changes.yml

@@ -5,11 +5,11 @@ jobs:
   compatibilitycheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           persist-credentials: false
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
         with:
           node-version-file: '.nvmrc'
       - name: Install dependencies

.github/workflows/integration.yml

@@ -27,12 +27,12 @@ jobs:
           - latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           persist-credentials: false
 
       - name: Install Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
         with:
           go-version-file: 'go.mod'
 

.github/workflows/issue_commands.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Actions
-        uses: actions/checkout@v6
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           repository: 'grafana/grafana-github-actions'
           path: ./actions