Fix audit alerts and enforce frozen lockfile

.github/actions/run-qunit-tests/action.yml

@@ -39,16 +39,6 @@ runs:
         echo "MATRIX_ENVS_NAME_SAFE=$MATRIX_ENVS_NAME_SAFE"
         echo "MATRIX_ENVS_NAME_SAFE=$MATRIX_ENVS_NAME_SAFE" >> $GITHUB_ENV
 
-    # - name: Setup Chrome
-    #   uses: ./.github/actions/setup-chrome-headless-shell
-    #   with:
-    #     chrome-version: '145.0.7632.67'
-
-    # - name: Use Node.js
-    #   uses: actions/setup-node@v4
-    #   with:
-    #     node-version: '20'
-
     - name: Download artifacts
       uses: actions/download-artifact@v4
       with:

.github/workflows/build_all.yml

@@ -46,7 +46,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run:  pnpm install
+        run:  pnpm install --frozen-lockfile
 
       - name: Build npm packages
         run: pnpm run all:build

.github/workflows/codeql.yml

@@ -42,7 +42,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       # - name: Build npm packages
       #   run: pnpm run all:build

.github/workflows/default_workflow.yml

@@ -51,7 +51,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Run targets
       run: >

.github/workflows/demos_unit_tests.yml

@@ -64,7 +64,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Run unit tests
         working-directory: apps/demos

.github/workflows/demos_visual_tests.yml

@@ -139,7 +139,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: DevExtreme - Build
         if: needs.determine-framework-tests-scope.outputs.framework-tests-scope == 'none'
@@ -240,12 +240,6 @@ jobs:
         working-directory: apps/demos
         run: pnpm add ../../devextreme-installer.tgz ../../devextreme-dist-installer.tgz ../../devextreme-react-installer.tgz ../../devextreme-vue-installer.tgz ../../devextreme-angular-installer.tgz
 
-#    - name: Build wrappers
-#      run: pnpm exec nx run-many -t pack -p devextreme-angular devextreme-react devetreme-vue
-
-#    - name: Link wrappers packages
-#      run: pnpm install
-
       - name: Prepare bundles
         working-directory: apps/demos
         run: pnpm exec nx prepare-bundles
@@ -550,7 +544,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Cache Roboto font
       if: contains(matrix.THEME, 'material')

.github/workflows/lint.yml

@@ -49,7 +49,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       working-directory: ./packages/devextreme
@@ -106,7 +106,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       working-directory: ./packages/devextreme
@@ -151,60 +151,12 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Check texts
       working-directory: ./packages/devextreme
       run: pnpm exec nx lint-texts
 
-  pnpm_lock:
-    runs-on: devextreme-shr2
-    timeout-minutes: 10
-    steps:
-    - name: Get sources
-      uses: actions/checkout@v4
-
-    - name: Use Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: '20'
-
-    - uses: pnpm/action-setup@v3
-      with:
-        version: 9
-        run_install: false
-
-    - name: Get pnpm store directory
-      shell: bash
-      run: |
-        echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
-
-    - uses: actions/cache@v4
-      name: Setup pnpm cache
-      with:
-        path: |
-          ${{ env.STORE_PATH }}
-          .nx/cache
-        key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-        restore-keys: |
-          ${{ runner.os }}-pnpm-store
-
-    - name: Update lock-file
-      run: |
-        node -v
-        pnpm -v
-        pnpm install
-
-    - name: Upload lock-file
-      uses: actions/upload-artifact@v4
-      with:
-        name: package-lock.json
-        path: ./package-lock.json
-        retention-days: 1
-
-    - name: Check lock-file
-      run: git diff --exit-code pnpm-lock.yaml
-
   component_exports:
     runs-on: devextreme-shr2
     timeout-minutes: 10
@@ -238,7 +190,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Check generated component reexports
       working-directory: ./packages/devextreme
@@ -288,15 +240,15 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Lint wrappers
       run: pnpm exec nx run-many -t lint -p devextreme-angular devextreme-react devextreme-vue
 
   notify:
     runs-on: devextreme-shr2
     name: Send notifications
-    needs: [TS, JS, texts, pnpm_lock, component_exports]
+    needs: [TS, JS, texts, component_exports]
     if: github.event_name != 'pull_request' && contains(needs.*.result, 'failure')
 
     steps:

.github/workflows/packages_publishing.yml

@@ -64,7 +64,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Set timestamp version
         if: ${{ env.SET_TIMESTAMP_VERSION == 'true' }}
@@ -150,7 +150,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Change package scope
         id: scopedPackage

.github/workflows/playgrounds_tests.yml

@@ -54,7 +54,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       working-directory: ./packages/devextreme
@@ -130,7 +130,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       working-directory: ./packages/devextreme-${{ matrix.ARGS.platform }}

.github/workflows/publish-demos.yml

@@ -36,7 +36,7 @@ jobs:
     - name: Install dependencies
       run: |
         corepack enable
-        pnpm install
+        pnpm install --frozen-lockfile
 
     - name: DevExtreme - Build-all
       env:
@@ -103,7 +103,7 @@ jobs:
     - name: Install dependencies
       run: |
         corepack enable
-        pnpm install
+        pnpm install --frozen-lockfile
 
     - name: Install tgz
       working-directory: apps/demos
@@ -205,7 +205,7 @@ jobs:
     - name: Install dependencies
       run: |
         corepack enable
-        pnpm install
+        pnpm install --frozen-lockfile
 
     - name: Install tgz
       working-directory: apps/demos

.github/workflows/qunit_tests.yml

@@ -63,7 +63,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       working-directory: ./packages/devextreme

.github/workflows/renovation.yml

@@ -49,7 +49,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build localization
       working-directory: ./packages/devextreme

.github/workflows/run-testcafe-on-gh-pages.yml

@@ -75,7 +75,7 @@ jobs:
               working-directory: devextreme
               run: |
                 corepack enable
-                pnpm install
+                pnpm install --frozen-lockfile
 
             - name: Run TestCafe tests
               working-directory: devextreme/apps/demos

.github/workflows/styles.yml

@@ -49,7 +49,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Run tests
       run: pnpm exec nx test devextreme-scss

.github/workflows/testcafe_tests.yml

@@ -65,7 +65,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build
       shell: bash
@@ -176,7 +176,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Check runner resources
       run: |

.github/workflows/themebuilder_tests.yml

@@ -50,7 +50,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Build etalon bundles
       working-directory: ./packages/devextreme-scss

.github/workflows/ts_declarations.yml

@@ -45,7 +45,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Check dx.all.d.ts is up-to-date
       working-directory: ./packages/devextreme
@@ -97,7 +97,7 @@ jobs:
           ${{ runner.os }}-pnpm-store
 
     - name: Install dependencies
-      run: pnpm install
+      run: pnpm install --frozen-lockfile
 
     - name: Validate declarations
       working-directory: ./packages/devextreme

.github/workflows/update_version.yml

@@ -49,7 +49,7 @@ jobs:
             ${{ runner.os }}-pnpm-store
 
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Setup git config
         run: |