diff --git a/.github/workflows/continuous-integration-terraform.yml b/.github/workflows/continuous-integration-terraform.yml
index c95133db..6c3f07c1 100644
--- a/.github/workflows/continuous-integration-terraform.yml
+++ b/.github/workflows/continuous-integration-terraform.yml
@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Terraform Validate
-        uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@v1.2.1
+        uses: DFE-Digital/terraform-linting-actions/.github/actions/validate@2608ca06a7f06e1869364c028a8d035d23627acc # v1.2.1
         with:
           terraform_version: '1.10.5'
           tflint_version: 'v0.44.1'
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index b926172f..7d749985 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -69,7 +69,7 @@ jobs:
     needs: [ set-env ]
     steps:
       - name: Validate Packages
-        uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@v1
+        uses: DFE-Digital/rsd-github-actions/.github/actions/validate-packages@1b3e9b9db584f9af44fcc592a9c24a4a66bd7b19 # v1
         with:
           environment: ${{ needs.set-env.outputs.environment }}
 
diff --git a/src/Tests/DfE.ExternalApplications.CypressTests/package.json b/src/Tests/DfE.ExternalApplications.CypressTests/package.json
index 123d9e43..f8c56dec 100644
--- a/src/Tests/DfE.ExternalApplications.CypressTests/package.json
+++ b/src/Tests/DfE.ExternalApplications.CypressTests/package.json
@@ -19,15 +19,15 @@
   },
   "devDependencies": {
     "@eslint/js": "^9.15.0",
-    "cypress": "^15.8.1",
-    "cypress-axe": "^0.14.0",
-    "cypress-multi-reporters": "^2.0.4",
+    "cypress": "15.8.1",
+    "cypress-axe": "0.14.0",
+    "cypress-multi-reporters": "2.0.5",
     "eslint": "^9.15.0",
     "eslint-plugin-cypress": "^4.1.0",
     "mochawesome": "^7.0.1",
     "mochawesome-merge": "^4.2.1",
     "mochawesome-report-generator": "^6.0.1",
-    "typescript": "^5.6.3",
+    "typescript": "5.9.3",
     "typescript-eslint": "^8.15.0"
   }
 }