diff --git a/.github/workflows/build-and-release-linux.yml b/.github/workflows/build-and-release-linux.yml
index e265a15..b663d9a 100644
--- a/.github/workflows/build-and-release-linux.yml
+++ b/.github/workflows/build-and-release-linux.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
         with:
           version: latest
 
       - name: Install Node.js and pnpm
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '22.x'
           cache: 'pnpm'
@@ -51,7 +51,7 @@ jobs:
 
       - name: Release assets
         if: ${{ startsWith(matrix.os, 'ubuntu') && startsWith(github.ref, 'refs/tags/v') }}
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
         with:
           draft: true
           allowUpdates: true
diff --git a/.github/workflows/build-and-release-mac.yml b/.github/workflows/build-and-release-mac.yml
index ecb268f..d1786b7 100644
--- a/.github/workflows/build-and-release-mac.yml
+++ b/.github/workflows/build-and-release-mac.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
         with:
           version: latest
 
       - name: Install Node.js and pnpm
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '22.x'
           cache: 'pnpm'
@@ -50,7 +50,7 @@ jobs:
 
       - name: Release assets
         if: ${{ startsWith(matrix.os, 'macos') && startsWith(github.ref, 'refs/tags/v') }}
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
         with:
           draft: true
           allowUpdates: true
diff --git a/.github/workflows/build-and-release-win.yml b/.github/workflows/build-and-release-win.yml
index 9391d8c..03e0b91 100644
--- a/.github/workflows/build-and-release-win.yml
+++ b/.github/workflows/build-and-release-win.yml
@@ -15,15 +15,15 @@ jobs:
 
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
         with:
           version: latest
 
       - name: Install Node.js and pnpm
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: '22.x'
           cache: 'pnpm'
@@ -61,7 +61,7 @@ jobs:
 
       - name: Release assets
         if: ${{ startsWith(matrix.os, 'windows') && startsWith(github.ref, 'refs/tags/v') }}
-        uses: ncipollo/release-action@v1
+        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
         with:
           draft: true
           allowUpdates: true
diff --git a/package.json b/package.json
index 758ec0c..7126fff 100644
--- a/package.json
+++ b/package.json
@@ -51,18 +51,18 @@
     "package-win": "pnpm build && pkg dist/cli-interactive.js --targets node22-win-x64 --output bin/win/ssv-keys.exe --compress GZip"
   },
   "devDependencies": {
-    "@types/argparse": "^2.0.17",
-    "@types/node": "^24.0.10",
-    "@types/prompts": "^2.4.9",
-    "@typescript-eslint/eslint-plugin": "^8.36.0",
-    "@typescript-eslint/parser": "^8.36.0",
-    "@yao-pkg/pkg": "^6.5.1",
-    "eslint": "^9.30.1",
-    "husky": "^9.1.7",
-    "ts-node": "^10.9.2",
-    "tsx": "^4.20.3",
-    "typescript": "^5.8.3",
-    "vite": "^7.0.0"
+    "@types/argparse": "2.0.17",
+    "@types/node": "24.0.12",
+    "@types/prompts": "2.4.9",
+    "@typescript-eslint/eslint-plugin": "8.36.0",
+    "@typescript-eslint/parser": "8.36.0",
+    "@yao-pkg/pkg": "6.5.1",
+    "eslint": "9.30.1",
+    "husky": "9.1.7",
+    "ts-node": "10.9.2",
+    "tsx": "4.20.3",
+    "typescript": "5.8.3",
+    "vite": "7.0.3"
   },
   "dependencies": {
     "@chainsafe/bls-keystore": "^3.1.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index f10d112..853a2a9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -43,40 +43,40 @@ importers:
         version: 3.2.4(@types/node@24.0.12)(tsx@4.20.3)(yaml@2.8.0)
     devDependencies:
       '@types/argparse':
-        specifier: ^2.0.17
+        specifier: 2.0.17
         version: 2.0.17
       '@types/node':
-        specifier: ^24.0.10
+        specifier: 24.0.12
         version: 24.0.12
       '@types/prompts':
-        specifier: ^2.4.9
+        specifier: 2.4.9
         version: 2.4.9
       '@typescript-eslint/eslint-plugin':
-        specifier: ^8.36.0
+        specifier: 8.36.0
         version: 8.36.0(@typescript-eslint/parser@8.36.0(eslint@9.30.1)(typescript@5.8.3))(eslint@9.30.1)(typescript@5.8.3)
       '@typescript-eslint/parser':
-        specifier: ^8.36.0
+        specifier: 8.36.0
         version: 8.36.0(eslint@9.30.1)(typescript@5.8.3)
       '@yao-pkg/pkg':
-        specifier: ^6.5.1
+        specifier: 6.5.1
         version: 6.5.1
       eslint:
-        specifier: ^9.30.1
+        specifier: 9.30.1
         version: 9.30.1
       husky:
-        specifier: ^9.1.7
+        specifier: 9.1.7
         version: 9.1.7
       ts-node:
-        specifier: ^10.9.2
+        specifier: 10.9.2
         version: 10.9.2(@types/node@24.0.12)(typescript@5.8.3)
       tsx:
-        specifier: ^4.20.3
+        specifier: 4.20.3
         version: 4.20.3
       typescript:
-        specifier: ^5.8.3
+        specifier: 5.8.3
         version: 5.8.3
       vite:
-        specifier: ^7.0.0
+        specifier: 7.0.3
         version: 7.0.3(@types/node@24.0.12)(tsx@4.20.3)(yaml@2.8.0)
 
 packages: