Pin crane and npm dependencies (#3477)

* ci: pin crane dependency

* docs: pin npm dependencies

* deps: bump docusaurus

---------

Co-authored-by: Thomas Tendyck <tt@edgeless.systems>

.github/workflows/build-ccm-gcp.yml

@@ -36,7 +36,7 @@ jobs:
 
       - name: Install Crane
         run: |
-          go install github.com/google/go-containerregistry/cmd/crane@latest
+          go install github.com/google/go-containerregistry/cmd/crane@c195f151efe3369874c72662cd69ad43ee485128 # v0.20.2
 
       - name: Find versions
         id: find-versions

.github/workflows/release.yml

@@ -92,7 +92,7 @@ jobs:
       - name: Create docs release
         working-directory: docs
         run: |
-          npm install
+          npm ci
           npm run docusaurus docs:version "${MAJOR_MINOR}"
 
       - name: Create docs pull request

docs/.gitignore

@@ -1,4 +1,3 @@
 node_modules
-package-lock.json
 .docusaurus
 build/

docs/README.md

@@ -8,7 +8,7 @@ During edits you can preview your changes using the [`docusaurus`](https://docus
 
 ```sh
 # requires node >=16.14
-npm install
+npm ci # Install pinned dependencies
 npm run build
 npm run serve
 ```

docs/package.json

@@ -14,25 +14,25 @@
     "write-heading-ids": "docusaurus write-heading-ids"
   },
   "dependencies": {
-    "@cmfcmf/docusaurus-search-local": "^1.2.0",
-    "@docusaurus/core": "^3.5.2",
-    "@docusaurus/plugin-google-gtag": "^3.5.2",
-    "@docusaurus/preset-classic": "^3.5.2",
-    "@docusaurus/theme-mermaid": "^3.5.2",
-    "@mdx-js/react": "^3.0.0",
-    "asciinema-player": "^3.8.0",
-    "clsx": "^2.0.0",
-    "prism-react-renderer": "^2.3.0",
-    "react": "^18.0.0",
-    "react-dom": "^18.0.0"
+    "@cmfcmf/docusaurus-search-local": "1.2.0",
+    "@docusaurus/core": "3.6.2",
+    "@docusaurus/plugin-google-gtag": "3.6.2",
+    "@docusaurus/preset-classic": "3.6.2",
+    "@docusaurus/theme-mermaid": "3.6.2",
+    "@mdx-js/react": "3.1.0",
+    "asciinema-player": "3.8.1",
+    "clsx": "2.1.1",
+    "prism-react-renderer": "2.4.0",
+    "react": "18.3.1",
+    "react-dom": "18.3.1"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "^3.5.2",
-    "@docusaurus/types": "^3.5.2"
+    "@docusaurus/module-type-aliases": "3.6.2",
+    "@docusaurus/types": "3.6.2"
   },
   "overrides": {
     "@cmfcmf/docusaurus-search-local": {
-      "@docusaurus/core": "3.5.2",
+      "@docusaurus/core": "3.6.2",
       "cheerio": "1.0.0-rc.12"
     }
   },

docs/versioned_docs/version-2.6/overview/performance.md

@@ -181,7 +181,7 @@ The following `fio` settings were used:
 - IOPS: 4 KB blocks and 128 iodepth
 - Bandwidth: 1024 KB blocks and 128 iodepth
 
-For more details, see the [`fio` test configuration](../../../../.github/actions/e2e_benchmark/fio.ini).
+For more details, see the [`fio` test configuration](https://github.com/edgelesssys/constellation/blob/main/.github/actions/e2e_benchmark/fio.ini).
 
 The results for IOPS on Azure are as follows:
 

docs/versioned_docs/version-2.7/overview/performance.md

@@ -181,7 +181,7 @@ The following `fio` settings were used:
 - IOPS: 4 KB blocks and 128 iodepth
 - Bandwidth: 1024 KB blocks and 128 iodepth
 
-For more details, see the [`fio` test configuration](../../../../.github/actions/e2e_benchmark/fio.ini).
+For more details, see the [`fio` test configuration](https://github.com/edgelesssys/constellation/blob/main/.github/actions/e2e_benchmark/fio.ini).
 
 The results for IOPS on Azure are as follows:
 

docs/versioned_docs/version-2.8/overview/performance.md

@@ -181,7 +181,7 @@ The following `fio` settings were used:
 - IOPS: 4 KB blocks and 128 iodepth
 - Bandwidth: 1024 KB blocks and 128 iodepth
 
-For more details, see the [`fio` test configuration](../../../../.github/actions/e2e_benchmark/fio.ini).
+For more details, see the [`fio` test configuration](https://github.com/edgelesssys/constellation/blob/main/.github/actions/e2e_benchmark/fio.ini).
 
 The results for IOPS on Azure are as follows: