chore(deps): pin dependencies

.github/workflows/bundle-size.yml

@@ -18,10 +18,10 @@ jobs:
           fetch-depth: 0
 
       - name: Install pnpm
-        uses: pnpm/[email protected]
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: 24.x
           registry-url: https://registry.npmjs.org/
@@ -47,7 +47,7 @@ jobs:
           pnpm test:bundle-size
           pnpm test:vue-bundle-size
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2
 
       - name: Run analyze script
         id: analyze
@@ -59,7 +59,7 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
 
       - name: Post comment on PR
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2
         with:
           header: Bundle Size Analysis
           message: |

.github/workflows/release.yml

@@ -18,10 +18,10 @@ jobs:
           fetch-depth: 0
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4
 
       - name: Set node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: latest
           cache: pnpm

.github/workflows/test.yml

@@ -18,10 +18,10 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Install pnpm
-        uses: pnpm/[email protected]
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: 24.x
           registry-url: https://registry.npmjs.org/

.github/workflows/write-bundle-size.yml

@@ -16,10 +16,10 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Install pnpm
-        uses: pnpm/[email protected]
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Use Node.js 24.x
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: 24.x
           registry-url: https://registry.npmjs.org/
@@ -37,7 +37,7 @@ jobs:
       - name: Run Vue bundle size test
         run: pnpm test:vue-bundle-size
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2
 
       - name: Update stats
         run: bun bench/bundle/update.ts

package.json

@@ -31,26 +31,26 @@
     "twoslash:verify": "nuxt-content-twoslash verify --content-dir docs"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^5.4.1",
-    "@arethetypeswrong/cli": "^0.18.2",
-    "@fast-check/vitest": "^0.2.2",
-    "@types/fs-extra": "^11.0.4",
-    "@types/jsdom": "^27.0.0",
-    "acorn-loose": "^8.5.2",
-    "bumpp": "^10.3.1",
-    "devalue": "^5.3.2",
-    "eslint": "^9.37.0",
-    "fs-extra": "^11.3.2",
+    "@antfu/eslint-config": "5.4.1",
+    "@arethetypeswrong/cli": "0.18.2",
+    "@fast-check/vitest": "0.2.2",
+    "@types/fs-extra": "11.0.4",
+    "@types/jsdom": "27.0.0",
+    "acorn-loose": "8.5.2",
+    "bumpp": "10.3.1",
+    "devalue": "5.3.2",
+    "eslint": "9.37.0",
+    "fs-extra": "11.3.2",
     "js-yaml": "^4.1.0",
-    "jsdom": "^27.0.0",
-    "rollup-plugin-analyzer": "^4.0.0",
+    "jsdom": "27.0.0",
+    "rollup-plugin-analyzer": "4.0.0",
     "typescript": "5.9.3",
-    "unbuild": "^3.6.1",
-    "utility-types": "^3.11.0",
-    "vitest": "^3.2.4",
-    "vitest-package-exports": "^0.1.1",
-    "vue": "^3.5.22",
-    "vue-tsc": "^3.0.9"
+    "unbuild": "3.6.1",
+    "utility-types": "3.11.0",
+    "vitest": "3.2.4",
+    "vitest-package-exports": "0.1.1",
+    "vue": "3.5.22",
+    "vue-tsc": "3.1.1"
   },
   "pnpm": {
     "ignoredBuiltDependencies": [

packages/addons/package.json

@@ -67,6 +67,6 @@
     "unplugin-ast": "^0.15.3"
   },
   "devDependencies": {
-    "@babel/types": "^7.28.4"
+    "@babel/types": "7.28.4"
   }
 }

packages/angular/package.json

@@ -72,7 +72,7 @@
     "unhead": "workspace:*"
   },
   "devDependencies": {
-    "@angular/platform-browser-dynamic": "^20.3.4",
-    "zone.js": "^0.15.1"
+    "@angular/platform-browser-dynamic": "20.3.4",
+    "zone.js": "0.15.1"
   }
 }

packages/react/package.json

@@ -80,8 +80,8 @@
     "unhead": "workspace:*"
   },
   "devDependencies": {
-    "@testing-library/react": "^16.3.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0"
+    "@testing-library/react": "16.3.0",
+    "react": "19.2.0",
+    "react-dom": "19.2.0"
   }
 }

packages/schema-org/package.json

@@ -107,7 +107,7 @@
     "@unhead/svelte": "workspace:*",
     "@unhead/vue": "workspace:*",
     "unhead": "workspace:*",
-    "unplugin-vue-components": "^29.1.0"
+    "unplugin-vue-components": "29.1.0"
   },
   "build": {
     "external": [

packages/solid-js/package.json

@@ -80,10 +80,10 @@
     "unhead": "workspace:*"
   },
   "devDependencies": {
-    "@solidjs/testing-library": "^0.8.10",
-    "@testing-library/jest-dom": "^6.9.1",
+    "@solidjs/testing-library": "0.8.10",
+    "@testing-library/jest-dom": "6.9.1",
     "@testing-library/user-event": "14.6.1",
-    "solid-js": "^1.9.9",
-    "vite-plugin-solid": "^2.11.9"
+    "solid-js": "1.9.9",
+    "vite-plugin-solid": "2.11.9"
   }
 }

packages/svelte/package.json

@@ -74,7 +74,7 @@
     "unhead": "workspace:*"
   },
   "devDependencies": {
-    "@testing-library/svelte": "^5.2.8",
-    "svelte": "^5.39.11"
+    "@testing-library/svelte": "5.2.8",
+    "svelte": "5.39.11"
   }
 }

packages/vue/package.json

@@ -112,6 +112,6 @@
     "unhead": "workspace:*"
   },
   "devDependencies": {
-    "vue": "^3.5.22"
+    "vue": "3.5.22"
   }
 }