diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index b9fbf82..2fee6d6 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -22,10 +22,10 @@ jobs:
   audit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v4.4.0
+      - uses: actions/setup-node@v4.4.0
         with:
-          node-version: "20"
+          node-version: "20.20.2"
       - name: Audit (high severity gate)
         run: npm audit --audit-level=high
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2710192..401c108 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v4.4.0
+      - uses: actions/setup-node@v4.4.0
         with:
-          node-version: "20"
+          node-version: "20.20.2"
           cache: npm
       - run: npm ci
       - name: Typecheck
diff --git a/package-lock.json b/package-lock.json
index eeb15c2..882827b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,14 +7,15 @@
     "": {
       "name": "@goodmeta/ap2-example",
       "version": "1.0.0",
+      "license": "Apache-2.0",
       "dependencies": {
-        "@hono/node-server": "^1.19.14",
-        "hono": "^4.12.19",
-        "viem": "^2.50.3"
+        "@hono/node-server": "1.19.14",
+        "hono": "4.12.27",
+        "viem": "2.53.1"
       },
       "devDependencies": {
         "@types/node": "22.19.17",
-        "tsx": "^4.22.2",
+        "tsx": "4.22.2",
         "typescript": "6.0.3"
       }
     },
diff --git a/package.json b/package.json
index b760e9a..eb18373 100644
--- a/package.json
+++ b/package.json
@@ -11,13 +11,13 @@
   },
   "devDependencies": {
     "@types/node": "22.19.17",
-    "tsx": "^4.22.2",
+    "tsx": "4.22.2",
     "typescript": "6.0.3"
   },
   "dependencies": {
-    "@hono/node-server": "^1.19.14",
-    "hono": "^4.12.19",
-    "viem": "^2.50.3"
+    "@hono/node-server": "1.19.14",
+    "hono": "4.12.27",
+    "viem": "2.53.1"
   },
   "overrides": {
     "ws": "8.21.0"