From 676607e3b351f49f764128319aaa98eec268d9b1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 10:36:28 +0000
Subject: [PATCH] fix(deps): pin dependencies

---
 .github/workflows/build.yml      | 10 +++++-----
 .github/workflows/playwright.yml | 10 +++++-----
 backend/pyproject.toml           |  2 +-
 frontend/package-lock.json       |  2 +-
 frontend/package.json            |  2 +-
 5 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b29b712e..1184e874 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,17 +16,17 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
             fetch-tags: true
             fetch-depth: 0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v4.4.1
 
       # --- Authenticate to GHCR ---
       - name: Login to GHCR
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -34,7 +34,7 @@ jobs:
 
       - name: Generate image metadata
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v6.2.0
         env:
           DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
         with:
@@ -48,7 +48,7 @@ jobs:
 
       # ---------- BUILD IMAGE ----------
       - name: Build image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v7.4.0
         with:
           context: .
           push: true
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index 5e7f09cd..6106cfa5 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -9,10 +9,10 @@ jobs:
     timeout-minutes: 60
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v7
-    - uses: actions/setup-node@v7
+    - uses: actions/checkout@v7.0.1
+    - uses: actions/setup-node@v7.1.0
       with:
-        node-version: 24
+        node-version: 24.21.0
 
     - uses: astral-sh/setup-uv@v10.2.0
     - name: Install Python dependencies
@@ -30,7 +30,7 @@ jobs:
       run: echo "version=$(npx playwright --version | awk '{print $2}')" >> $GITHUB_OUTPUT
     - name: Cache Playwright browsers
       id: playwright-cache
-      uses: actions/cache@v6
+      uses: actions/cache@v6.1.0
       with:
         path: ~/.cache/ms-playwright
         key: playwright-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}
@@ -51,7 +51,7 @@ jobs:
     - name: Run Playwright tests
       working-directory: testing
       run: npx playwright test
-    - uses: actions/upload-artifact@v7
+    - uses: actions/upload-artifact@v7.0.2
       if: ${{ !cancelled() }}
       with:
         name: playwright-report
diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index bf2ba4ca..9334def9 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -2,7 +2,7 @@
 name = "qlue-ui-backend"
 version = "0.6.0"
 description = "Backend API for Qlue-UI"
-requires-python = ">=3.10"
+requires-python = "==3.15.0"
 dependencies = [
     "fastapi[standard]==0.142.2",
     "uvicorn[standard]==0.54.0",
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index dd53c198..8e21be63 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -12,7 +12,7 @@
         "d3": "7.9.0",
         "monaco-editor": "npm:@codingame/monaco-vscode-editor-api@37.3.0",
         "monaco-languageclient": "11.0.2",
-        "qlue-ls": "^3.11.1",
+        "qlue-ls": "3.11.1",
         "sparql-results": "0.2.0",
         "tailwindcss": "4.3.3",
         "vscode": "npm:@codingame/monaco-vscode-extension-api@37.3.0"
diff --git a/frontend/package.json b/frontend/package.json
index 9a2c1eca..669792cd 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -25,7 +25,7 @@
     "d3": "7.9.0",
     "monaco-editor": "npm:@codingame/monaco-vscode-editor-api@37.3.0",
     "monaco-languageclient": "11.0.2",
-    "qlue-ls": "^3.11.1",
+    "qlue-ls": "3.11.1",
     "sparql-results": "0.2.0",
     "tailwindcss": "4.3.3",
     "vscode": "npm:@codingame/monaco-vscode-extension-api@37.3.0"