chore(deps): pin dependencies

[Coldaine]

User description

Agent review expected: verify the dependency impact, summarize CI status, and merge only when the update is coherent for this repo.

This PR contains the following updates:

Package	Type	Update	Change
@types/node (source)	devDependencies	pin	^20.0.0 → 20.19.37
searxng/searxng		pinDigest	→ e45d589
typescript (source)	devDependencies	pin	^5.3.0 → 5.9.3

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • Between 04:00 AM and 08:59 AM, Monday through Friday (* 4-8 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

---

CodeAnt-AI Description

Pin development tools and the SearXNG container for reproducible builds and deployments

What Changed

• Development builds now use fixed versions of Node.js type definitions and TypeScript
• Docker deployments now use a fixed SearXNG image digest instead of the moving latest image tag
• Dependency installation and container updates produce consistent results across environments

Impact

✅ Reproducible builds
✅ Consistent SearXNG deployments
✅ Fewer unexpected dependency changes

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

[codeant-ai]

🤖 CodeAnt AI — Review Status

Status	Commit	Started (UTC)	Finished (UTC)
✅ Incremental review completed	f0ad145	Aug 17, 2026 · 10:32	10:32
✅ Reviewed your PR	e324a34	Aug 14, 2026 · 06:08	06:08

[codeant-ai]

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[Copilot]

Pull request overview

This PR pins key development and deployment dependencies to improve reproducibility: TypeScript/@types/node are moved from caret ranges to exact versions, and the SearXNG container is pinned by digest to avoid drifting deployments.

Changes:

• Pin @types/node to 20.19.37 and typescript to 5.9.3 in package.json and package-lock.json.
• Pin the searxng/searxng container image by digest in docker-compose.yml.

CI status: Not available from this review environment (GitHub API access to workflow/PR status was not permitted), so merge should be contingent on CI being green.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
package.json	Pins dev toolchain versions for deterministic local/CI builds.
package-lock.json	Aligns lockfile with pinned devDependencies to ensure npm ci is reproducible.
docker/searxng/docker-compose.yml	Pins SearXNG image by digest for deterministic deployments.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

• docker/searxng/docker-compose.yml - no new issues in changed lines

Previous Review Summaries (2 snapshots, latest commit dee9fba)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit dee9fba)

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)

• docker/searxng/docker-compose.yml
• package-lock.json
• package.json

Previous review (commit e324a34)

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)

• docker/searxng/docker-compose.yml
• package-lock.json
• package.json

---

_{Reviewed by step-3.7-flash · Input: 41.5K · Output: 2.1K · Cached: 72.4K}

[codeant-ai]

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_ce421983-6424-4e26-94b1-68813ed59149)