From 1a98b7b9639800a8133b0f37d64361f7a07f7442 Mon Sep 17 00:00:00 2001
From: "pulumi-renovate[bot]"
 <189166143+pulumi-renovate[bot]@users.noreply.github.com>
Date: Sun, 15 Dec 2024 05:44:08 +0000
Subject: [PATCH] Pin dependencies

---
 .devcontainer/aws/Dockerfile                  |  2 +-
 .github/actions/setup/action.yml              | 14 ++++++-------
 .github/workflows/add-to-project.yaml         |  2 +-
 .github/workflows/command-dispatch.yml        |  4 ++--
 .github/workflows/pr.yml                      |  4 ++--
 .github/workflows/test-examples.yml           | 14 ++++++-------
 alicloud-ts-ecs/package.json                  |  2 +-
 aws-apigateway-ts-routes/package.json         |  6 +++---
 aws-cs-fargate/App/Dockerfile                 |  4 ++--
 aws-cs-langserve/Dockerfile                   |  2 +-
 aws-cs-langserve/poetry.lock                  |  4 ++--
 aws-cs-langserve/pyproject.toml               | 12 +++++------
 aws-go-fargate/app/Dockerfile                 |  2 +-
 aws-go-langserve/Dockerfile                   |  2 +-
 aws-go-langserve/poetry.lock                  |  4 ++--
 aws-go-langserve/pyproject.toml               | 12 +++++------
 aws-js-containers/app/Dockerfile              |  2 +-
 aws-js-langserve/Dockerfile                   |  2 +-
 aws-js-langserve/poetry.lock                  |  4 ++--
 aws-js-langserve/pyproject.toml               | 12 +++++------
 aws-js-s3-folder-component/package.json       |  2 +-
 aws-js-s3-folder/package.json                 |  2 +-
 aws-js-sqs-slack/package.json                 |  2 +-
 aws-py-django-voting-app/frontend/Dockerfile  |  2 +-
 .../automation/package.json                   |  6 +++---
 aws-py-fargate/pyproject.toml                 |  4 ++--
 aws-py-langserve/Dockerfile                   |  2 +-
 aws-py-langserve/poetry.lock                  |  4 ++--
 aws-py-langserve/pyproject.toml               | 12 +++++------
 aws-py-voting-app/frontend/Dockerfile         |  2 +-
 aws-ts-airflow/airflow-container/Dockerfile   |  2 +-
 aws-ts-airflow/package.json                   |  4 ++--
 aws-ts-ansible-wordpress/package.json         |  4 ++--
 aws-ts-apigateway-auth0/package.json          | 10 +++++-----
 aws-ts-apigateway-eventbridge/package.json    |  2 +-
 .../package.json                              |  4 ++--
 aws-ts-apigateway/package.json                |  4 ++--
 aws-ts-apigatewayv2-eventbridge/package.json  |  2 +-
 .../package.json                              |  2 +-
 aws-ts-apigatewayv2-http-api/package.json     |  2 +-
 aws-ts-assume-role/assume-role/package.json   |  2 +-
 aws-ts-assume-role/create-role/package.json   |  2 +-
 aws-ts-containers-dockerbuild/app/Dockerfile  |  2 +-
 aws-ts-containers-dockerbuild/package.json    |  2 +-
 .../app/Dockerfile                            |  2 +-
 .../package.json                              |  2 +-
 aws-ts-containers/app/Dockerfile              |  2 +-
 aws-ts-containers/package.json                |  2 +-
 aws-ts-ec2-provisioners/package.json          |  2 +-
 aws-ts-ecs-anywhere/app/Dockerfile            |  4 ++--
 aws-ts-ecs-anywhere/app/package.json          |  4 ++--
 aws-ts-ecs-anywhere/package.json              |  2 +-
 aws-ts-eks-distro/package.json                | 10 +++++-----
 aws-ts-eks-hello-world/package.json           |  2 +-
 aws-ts-eks-migrate-nodegroups/package.json    |  4 ++--
 aws-ts-eks/package.json                       |  4 ++--
 aws-ts-hello-fargate/app/Dockerfile           |  2 +-
 aws-ts-hello-fargate/package.json             |  4 ++--
 .../clientside/Dockerfile                     |  2 +-
 .../clientside/client/package.json            | 10 +++++-----
 .../databaseside/Dockerfile                   |  2 +-
 aws-ts-k8s-mern-voting-app/package.json       |  4 ++--
 .../serverside/Dockerfile                     |  2 +-
 .../serverside/server/package.json            |  6 +++---
 aws-ts-k8s-voting-app/clientside/Dockerfile   |  2 +-
 .../clientside/client/package.json            | 10 +++++-----
 aws-ts-k8s-voting-app/databaseside/Dockerfile |  2 +-
 aws-ts-k8s-voting-app/package.json            |  6 +++---
 aws-ts-k8s-voting-app/serverside/Dockerfile   |  2 +-
 .../serverside/server/package.json            |  8 ++++----
 aws-ts-lambda-efs/package.json                |  4 ++--
 aws-ts-lambda-slack/package.json              |  4 ++--
 aws-ts-lambda-thumbnailer/app/Dockerfile      |  2 +-
 aws-ts-langserve/Dockerfile                   |  2 +-
 aws-ts-langserve/package.json                 |  4 ++--
 aws-ts-langserve/poetry.lock                  |  4 ++--
 aws-ts-langserve/pyproject.toml               | 12 +++++------
 aws-ts-localai-flowise/package.json           |  6 +++---
 .../.github/workflows/build-and-deploy.yml    |  2 +-
 .../cms-oauth/Dockerfile                      |  2 +-
 .../cms-oauth/infrastructure/package.json     |  2 +-
 .../cms/.github/workflows/deployCMS.yml       |  2 +-
 .../cms/infrastructure/package.json           |  6 +++---
 aws-ts-netlify-cms-and-oauth/cms/package.json | 10 +++++-----
 aws-ts-nextjs/demoapp/package.json            |  2 +-
 aws-ts-nextjs/package.json                    | 10 +++++-----
 .../package.json                              |  4 ++--
 aws-ts-organizations/package.json             |  4 ++--
 aws-ts-pern-voting-app/clientside/Dockerfile  |  2 +-
 .../clientside/client/package.json            | 10 +++++-----
 aws-ts-pern-voting-app/package.json           |  6 +++---
 aws-ts-pern-voting-app/serverside/Dockerfile  |  2 +-
 .../serverside/server/package.json            |  8 ++++----
 aws-ts-pulumi-miniflux/package.json           |  4 ++--
 aws-ts-pulumi-webhooks/package.json           |  4 ++--
 aws-ts-redshift-glue-etl/package.json         |  4 ++--
 aws-ts-resources/package.json                 |  2 +-
 aws-ts-ruby-on-rails/package.json             |  2 +-
 aws-ts-s3-folder/package.json                 |  6 +++---
 aws-ts-s3-lambda-copyzip/package.json         |  6 +++---
 aws-ts-secrets-manager/package.json           |  2 +-
 aws-ts-serverless-datawarehouse/package.json  | 20 +++++++++----------
 aws-ts-slackbot/package.json                  | 16 +++++++--------
 .../application/package.json                  | 10 +++++-----
 .../application/src/backend/Dockerfile        |  2 +-
 .../database/package.json                     | 10 +++++-----
 .../networking/package.json                   | 10 +++++-----
 aws-ts-stackreference/company/package.json    |  2 +-
 aws-ts-stackreference/department/package.json |  2 +-
 aws-ts-stackreference/team/package.json       |  2 +-
 aws-ts-static-website/package.json            |  6 +++---
 aws-ts-stepfunctions/package.json             |  2 +-
 aws-ts-synthetics-canary/package.json         |  2 +-
 .../docker-ffmpeg-thumb/Dockerfile            |  2 +-
 aws-ts-twitter-athena/package.json            |  6 +++---
 aws-ts-url-shortener-cache-http/package.json  | 18 ++++++++---------
 aws-ts-voting-app/frontend/Dockerfile         |  2 +-
 aws-ts-voting-app/package.json                |  2 +-
 .../vpc-crosswalk-ts/package.json             |  2 +-
 aws-ts-webserver/package.json                 |  2 +-
 aws-ts-wordpress-fargate-rds/package.json     |  2 +-
 aws-yaml-langserve/Dockerfile                 |  2 +-
 aws-yaml-langserve/poetry.lock                |  4 ++--
 aws-yaml-langserve/pyproject.toml             | 12 +++++------
 .../node-app/Dockerfile                       |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-cs-containerapps/node-app/Dockerfile    |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-cs-net5-aks-webapp/app/Dockerfile       |  2 +-
 azure-cs-net5-aks-webapp/app/app/package.json |  4 ++--
 .../node-app/Dockerfile                       |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-go-containerapps/node-app/Dockerfile    |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 .../node-app/Dockerfile                       |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-py-containerapps/node-app/Dockerfile    |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-ts-aci/package.json                     |  2 +-
 azure-ts-aks-helm/package.json                |  2 +-
 azure-ts-aks-managed-identity/package.json    |  4 ++--
 azure-ts-aks-multicluster/package.json        |  2 +-
 azure-ts-aks/package.json                     |  2 +-
 .../node-app/Dockerfile                       |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-ts-appservice-docker/package.json       |  2 +-
 azure-ts-appservice/package.json              |  2 +-
 azure-ts-call-azure-sdk/package.json          |  6 +++---
 azure-ts-containerapps/node-app/Dockerfile    |  2 +-
 .../node-app/app/package.json                 |  4 ++--
 azure-ts-containerapps/package.json           |  2 +-
 azure-ts-functions-many/package.json          |  2 +-
 azure-ts-functions/package.json               |  2 +-
 .../package.json                              |  6 +++---
 azure-ts-static-website/package.json          |  2 +-
 azure-ts-synapse/package.json                 |  2 +-
 .../package.json                              |  2 +-
 azure-ts-webserver/package.json               |  2 +-
 azure-yaml-container-apps/node-app/Dockerfile |  2 +-
 classic-azure-fs-aci/app/Dockerfile           |  2 +-
 .../functionapp/Dockerfile                    |  2 +-
 classic-azure-ts-aks-keda/package.json        |  2 +-
 classic-azure-ts-aks-mean/package.json        |  6 +++---
 classic-azure-ts-api-management/package.json  |  2 +-
 .../infra/package.json                        |  2 +-
 .../container/Dockerfile                      |  2 +-
 .../container/app/package.json                |  6 +++---
 .../package.json                              |  8 ++++----
 .../policy/package.json                       |  2 +-
 classic-azure-ts-hdinsight-spark/package.json |  2 +-
 .../package.json                              |  2 +-
 .../package.json                              |  4 ++--
 .../package.json                              |  8 ++++----
 .../kubernetes-ts-crontabs/package.json       |  2 +-
 docker-cs-multi-container-app/App/Dockerfile  |  4 ++--
 docker-py-multi-container-app/app/Dockerfile  |  2 +-
 docker-ts-multi-container-app/app/Dockerfile  |  2 +-
 .../app/package.json                          |  4 ++--
 docker-ts-multi-container-app/package.json    |  2 +-
 dockerbuildcloud-ts/app/Dockerfile            |  2 +-
 dockerbuildcloud-ts/package.json              |  2 +-
 equinix-ts-webserver/package.json             |  2 +-
 .../f5bigip-ec2-instance/package.json         |  2 +-
 f5bigip-ts-ltm-pool/f5bigip-pool/package.json |  2 +-
 .../nginx-ec2-instance/package.json           |  2 +-
 gcp-ts-cloudrun/app/Dockerfile                |  2 +-
 gcp-ts-cloudrun/package.json                  |  4 ++--
 .../cloud-run-deploy/package.json             |  2 +-
 .../docker-build-push-gcr/app/Dockerfile      |  2 +-
 .../docker-build-push-gcr/package.json        |  2 +-
 gcp-ts-functions/package.json                 |  4 ++--
 gcp-ts-gke-hello-world/package.json           |  2 +-
 gcp-ts-gke-serviceaccount/package.json        |  2 +-
 gcp-ts-gke/package.json                       |  2 +-
 .../app/Dockerfile                            |  2 +-
 .../infra/package.json                        |  2 +-
 .../typescriptfunc/package.json               |  2 +-
 gcp-ts-slackbot/package.json                  | 16 +++++++--------
 google-native-ts-functions/package.json       |  4 ++--
 .../app/Dockerfile                            |  2 +-
 .../infra/package.json                        |  2 +-
 .../app/Dockerfile                            |  2 +-
 .../infra/package.json                        |  2 +-
 kubernetes-ts-configmap-rollout/package.json  |  2 +-
 kubernetes-ts-exposed-deployment/package.json |  2 +-
 .../components/package.json                   |  2 +-
 kubernetes-ts-guestbook/simple/package.json   |  2 +-
 .../package.json                              |  2 +-
 kubernetes-ts-helm-wordpress/package.json     |  2 +-
 kubernetes-ts-jenkins/package.json            |  2 +-
 kubernetes-ts-multicloud/package.json         |  4 ++--
 kubernetes-ts-nginx/package.json              |  2 +-
 kubernetes-ts-s3-rollout/package.json         |  6 +++---
 kubernetes-ts-sock-shop/package.json          |  2 +-
 .../package.json                              |  2 +-
 misc/benchmarks/policy-pack/package.json      |  2 +-
 .../benchmarks/ts-many-resources/package.json |  2 +-
 multicloud-ts-buckets/package.json            |  2 +-
 .../components/website-deploy/package.json    |  4 ++--
 nx-monorepo/package.json                      |  2 +-
 nx-monorepo/website/package.json              |  4 ++--
 policy-packs/aws-ts-advanced/package.json     |  4 ++--
 policy-packs/aws-ts-finops/package.json       |  2 +-
 policy-packs/aws-ts/package.json              |  4 ++--
 policy-packs/azure-ts/package.json            |  4 ++--
 policy-packs/gcp-ts/package.json              |  4 ++--
 policy-packs/kubernetes-ts/package.json       |  4 ++--
 policy-packs/stackvalidation-ts/package.json  |  2 +-
 redis-cloud-aws-ts/package.json               |  4 ++--
 secrets-provider/aws/package.json             |  2 +-
 secrets-provider/azure/package.json           |  2 +-
 secrets-provider/gcloud/package.json          |  2 +-
 secrets-provider/vault/package.json           |  2 +-
 stack-readme-ts/package.json                  |  2 +-
 testing-integration/program/package.json      |  6 +++---
 testing-pac-ts/package.json                   |  4 ++--
 testing-unit-ts-mocks-jest/package.json       | 10 +++++-----
 testing-unit-ts/mocha/package.json            | 10 +++++-----
 twilio-ts-component/package.json              |  2 +-
 239 files changed, 460 insertions(+), 460 deletions(-)

diff --git a/.devcontainer/aws/Dockerfile b/.devcontainer/aws/Dockerfile
index 8b0bedf82..270d8b437 100644
--- a/.devcontainer/aws/Dockerfile
+++ b/.devcontainer/aws/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/pulumi/devcontainer:extra
+FROM ghcr.io/pulumi/devcontainer:extra@sha256:e8534db8f45cfd886f74ce806ab71aaa7b5016a880570dc5d984dc56a0b106f4
 
 ##################################################################################
 # Install AWS CLI v2
diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index 94cb98226..e5cef3600 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -88,22 +88,22 @@ runs:
   using: composite
   steps:
     - name: Install .NET
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4
       with:
         dotnet-version: ${{inputs.dotnet-version}}
 
     - name: Install Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
       with:
         node-version: ${{inputs.node-version}}
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5
       with:
         python-version: ${{inputs.python-version}}
 
     - name: Install Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5
       with:
         go-version: ${{inputs.go-version}}
         cache-dependency-path: "**/go.sum"
@@ -149,7 +149,7 @@ runs:
 
     - name: Authenticate with AWS
       id: aws-auth
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
       with:
         aws-access-key-id: ${{ inputs.aws-access-key-id }}
         aws-secret-access-key: ${{ inputs.aws-secret-access-key }}
@@ -161,13 +161,13 @@ runs:
         output-credentials: true
 
     - name: Authenticate with Google Cloud
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2
       with:
         service_account: ${{ inputs.google-service-account-email }}
         workload_identity_provider: projects/${{ inputs.google-project-number }}/locations/global/workloadIdentityPools/${{ inputs.google-workload-identity-pool }}/providers/${{ inputs.google-workload-identity-provider }}
 
     - name: Install gcloud auth
-      uses: google-github-actions/setup-gcloud@v2
+      uses: google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a # v2
       with:
         install_components: gke-gcloud-auth-plugin
 
diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
index 16d3ae585..0b7f34b15 100644
--- a/.github/workflows/add-to-project.yaml
+++ b/.github/workflows/add-to-project.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Add to DevRel
-        uses: actions/add-to-project@v0.4.0
+        uses: actions/add-to-project@960fbad431afda394cfcf8743445e741acd19e85 # v0.4.0
         with:
           project-url: https://github.com/orgs/pulumi/projects/47
           github-token: ${{ secrets.PULUMI_BOT_GHA_MARKETING }}
diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml
index 96463702c..cc125244e 100644
--- a/.github/workflows/command-dispatch.yml
+++ b/.github/workflows/command-dispatch.yml
@@ -9,9 +9,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Run Build
-      uses: peter-evans/slash-command-dispatch@v2
+      uses: peter-evans/slash-command-dispatch@40877f718dce0101edfc7aea2b3800cc192f9ed5 # v2
       with:
         commands: run-tests
         issue-type: pull-request
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 4341e17fd..19a07b3ab 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -8,9 +8,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Comment PR
-      uses: thollander/actions-comment-pull-request@v1
+      uses: thollander/actions-comment-pull-request@8a3fad13c20088e9eb0805666b9fe49509d2fec8 # v1
       with:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         message: >
diff --git a/.github/workflows/test-examples.yml b/.github/workflows/test-examples.yml
index 8a0744f10..58f98a3c5 100644
--- a/.github/workflows/test-examples.yml
+++ b/.github/workflows/test-examples.yml
@@ -18,7 +18,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -40,7 +40,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -64,7 +64,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -88,7 +88,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -110,7 +110,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -142,7 +142,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
@@ -202,7 +202,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Set up the environment
         uses: ./.github/actions/setup
diff --git a/alicloud-ts-ecs/package.json b/alicloud-ts-ecs/package.json
index 183af4425..e153c8632 100644
--- a/alicloud-ts-ecs/package.json
+++ b/alicloud-ts-ecs/package.json
@@ -1,7 +1,7 @@
 {
     "name": "alicloud-ts-ecs",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/alicloud": "3.69.0",
diff --git a/aws-apigateway-ts-routes/package.json b/aws-apigateway-ts-routes/package.json
index 2f89dc439..ce309ddad 100644
--- a/aws-apigateway-ts-routes/package.json
+++ b/aws-apigateway-ts-routes/package.json
@@ -1,13 +1,13 @@
 {
     "name": "typescript",
     "devDependencies": {
-        "@types/aws-lambda": "^8.10.85",
-        "@types/node": "^8.0.0"
+        "@types/aws-lambda": "8.10.146",
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/pulumi": "3.142.0",
-        "aws-lambda": "^1.0.7"
+        "aws-lambda": "1.0.7"
     }
 }
diff --git a/aws-cs-fargate/App/Dockerfile b/aws-cs-fargate/App/Dockerfile
index 767387e78..971004641 100644
--- a/aws-cs-fargate/App/Dockerfile
+++ b/aws-cs-fargate/App/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/core/sdk:3.1 AS build
+FROM mcr.microsoft.com/dotnet/core/sdk:3.1@sha256:150d074697d1cda38a0c2185fe43895d84b5745841e9d15c5adba29604a6e4cb AS build
 WORKDIR /app/src
 
 # First restore dependencies so app changes are faster.
@@ -10,7 +10,7 @@ COPY * ./
 RUN dotnet publish -c release -o /app/bin --no-restore
 
 # Create a new, smaller image stage, that just runs the DLL.
-FROM mcr.microsoft.com/dotnet/core/aspnet:3.1
+FROM mcr.microsoft.com/dotnet/core/aspnet:3.1@sha256:e3b773f30a0a6e88d71ce52429f6847627fc9353e491346902ca345760b82bdd
 WORKDIR /app
 COPY --from=build /app/bin ./
 ENTRYPOINT [ "dotnet", "aws-cs-fargate.dll" ]
diff --git a/aws-cs-langserve/Dockerfile b/aws-cs-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-cs-langserve/Dockerfile
+++ b/aws-cs-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-cs-langserve/poetry.lock b/aws-cs-langserve/poetry.lock
index 6e8ce58a5..db9965b3f 100644
--- a/aws-cs-langserve/poetry.lock
+++ b/aws-cs-langserve/poetry.lock
@@ -1795,5 +1795,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "1fd29dc8bbde957e67e6215655fad52b6a7e5f96cbee55be345e15ec46ce4f2d"
diff --git a/aws-cs-langserve/pyproject.toml b/aws-cs-langserve/pyproject.toml
index fc23f380a..378b9d12d 100644
--- a/aws-cs-langserve/pyproject.toml
+++ b/aws-cs-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/aws-go-fargate/app/Dockerfile b/aws-go-fargate/app/Dockerfile
index 750118e88..f0dc4bf1c 100644
--- a/aws-go-fargate/app/Dockerfile
+++ b/aws-go-fargate/app/Dockerfile
@@ -1,6 +1,6 @@
 # Start from a Debian image with the latest version of Go installed
 # and a workspace (GOPATH) configured at /go.
-FROM golang
+FROM golang@sha256:70031844b8c225351d0bb63e2c383f80db85d92ba894e3da7e13bcf80efa9a37
 
 # Copy the local package files to the container's workspace.
 ADD . /go/src/foo
diff --git a/aws-go-langserve/Dockerfile b/aws-go-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-go-langserve/Dockerfile
+++ b/aws-go-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-go-langserve/poetry.lock b/aws-go-langserve/poetry.lock
index 6e8ce58a5..db9965b3f 100644
--- a/aws-go-langserve/poetry.lock
+++ b/aws-go-langserve/poetry.lock
@@ -1795,5 +1795,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "1fd29dc8bbde957e67e6215655fad52b6a7e5f96cbee55be345e15ec46ce4f2d"
diff --git a/aws-go-langserve/pyproject.toml b/aws-go-langserve/pyproject.toml
index d97081d19..1b250a5a3 100644
--- a/aws-go-langserve/pyproject.toml
+++ b/aws-go-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/aws-js-containers/app/Dockerfile b/aws-js-containers/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/aws-js-containers/app/Dockerfile
+++ b/aws-js-containers/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/aws-js-langserve/Dockerfile b/aws-js-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-js-langserve/Dockerfile
+++ b/aws-js-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-js-langserve/poetry.lock b/aws-js-langserve/poetry.lock
index 6e8ce58a5..db9965b3f 100644
--- a/aws-js-langserve/poetry.lock
+++ b/aws-js-langserve/poetry.lock
@@ -1795,5 +1795,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "1fd29dc8bbde957e67e6215655fad52b6a7e5f96cbee55be345e15ec46ce4f2d"
diff --git a/aws-js-langserve/pyproject.toml b/aws-js-langserve/pyproject.toml
index 8be1ffa88..980804ed1 100644
--- a/aws-js-langserve/pyproject.toml
+++ b/aws-js-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/aws-js-s3-folder-component/package.json b/aws-js-s3-folder-component/package.json
index a8bc2d7a9..02f6341c9 100644
--- a/aws-js-s3-folder-component/package.json
+++ b/aws-js-s3-folder-component/package.json
@@ -4,6 +4,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.2.2"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-js-s3-folder/package.json b/aws-js-s3-folder/package.json
index 66d4fd2a2..9c4a1d8d2 100644
--- a/aws-js-s3-folder/package.json
+++ b/aws-js-s3-folder/package.json
@@ -4,6 +4,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.2.2"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-js-sqs-slack/package.json b/aws-js-sqs-slack/package.json
index 586d33eca..2350ee584 100644
--- a/aws-js-sqs-slack/package.json
+++ b/aws-js-sqs-slack/package.json
@@ -3,6 +3,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "@slack/client": "^4.3.1"
+        "@slack/client": "4.12.0"
     }
 }
diff --git a/aws-py-django-voting-app/frontend/Dockerfile b/aws-py-django-voting-app/frontend/Dockerfile
index d11625e15..3b5cafe81 100755
--- a/aws-py-django-voting-app/frontend/Dockerfile
+++ b/aws-py-django-voting-app/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-py-ecs-instances-autoapi/automation/package.json b/aws-py-ecs-instances-autoapi/automation/package.json
index e2af72b9e..652a6f7c9 100644
--- a/aws-py-ecs-instances-autoapi/automation/package.json
+++ b/aws-py-ecs-instances-autoapi/automation/package.json
@@ -8,9 +8,9 @@
   "dependencies": {
     "@pulumi/aws": "6.64.0",
     "@pulumi/pulumi": "3.142.0",
-    "@types/node": "^14.14.20",
-    "ts-node": "^9.0.0",
-    "upath": "^2.0.0"
+    "@types/node": "14.18.63",
+    "ts-node": "9.1.1",
+    "upath": "2.0.1"
   },
   "scripts": {
     "start": "./node_modules/ts-node/dist/bin.js index.ts"
diff --git a/aws-py-fargate/pyproject.toml b/aws-py-fargate/pyproject.toml
index ab234fc9e..4faa8520b 100644
--- a/aws-py-fargate/pyproject.toml
+++ b/aws-py-fargate/pyproject.toml
@@ -2,10 +2,10 @@
 package-mode = false
 
 [tool.poetry.dependencies]
-python = "^3.10"
+python = "3.13.1"
 pulumi = "==3.142.0"
 pulumi-aws = "==6.64.0"
-pyright = ">=1.1.369,<2.0.0"
+pyright = "==1.1.390"
 
 [build-system]
 requires = ["poetry-core"]
diff --git a/aws-py-langserve/Dockerfile b/aws-py-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-py-langserve/Dockerfile
+++ b/aws-py-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-py-langserve/poetry.lock b/aws-py-langserve/poetry.lock
index a28a27201..db565fb1f 100644
--- a/aws-py-langserve/poetry.lock
+++ b/aws-py-langserve/poetry.lock
@@ -1778,5 +1778,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "f21a333e2886393daf6ca38b10a48054a7a06fc3a3c718b63db98ac1749d937e"
diff --git a/aws-py-langserve/pyproject.toml b/aws-py-langserve/pyproject.toml
index 2fc986391..dcdc9598b 100644
--- a/aws-py-langserve/pyproject.toml
+++ b/aws-py-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.10.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/aws-py-voting-app/frontend/Dockerfile b/aws-py-voting-app/frontend/Dockerfile
index 690a4775b..efdb78f62 100755
--- a/aws-py-voting-app/frontend/Dockerfile
+++ b/aws-py-voting-app/frontend/Dockerfile
@@ -1,3 +1,3 @@
-FROM tiangolo/uwsgi-nginx-flask:python3.6
+FROM tiangolo/uwsgi-nginx-flask:python3.6@sha256:07b3a61dc2f6d6b294065f929d33cdf6416133320cf61cc66b7cdb1428460e75
 RUN  pip install redis
 COPY /app /app
diff --git a/aws-ts-airflow/airflow-container/Dockerfile b/aws-ts-airflow/airflow-container/Dockerfile
index bc93a2cc0..c1ab4f90f 100644
--- a/aws-ts-airflow/airflow-container/Dockerfile
+++ b/aws-ts-airflow/airflow-container/Dockerfile
@@ -1,3 +1,3 @@
-FROM puckel/docker-airflow
+FROM puckel/docker-airflow@sha256:e3012994e4e730dccf56878094ff5524bffbe347e5870832dd6f7636eb0292a4
 
 ADD dags /usr/local/airflow/dags
diff --git a/aws-ts-airflow/package.json b/aws-ts-airflow/package.json
index a38e00195..bcfef43f3 100644
--- a/aws-ts-airflow/package.json
+++ b/aws-ts-airflow/package.json
@@ -1,12 +1,12 @@
 {
     "name": "airflow",
     "devDependencies": {
-        "@types/node": "^18.13.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "typescript": "^4.6.0"
+        "typescript": "4.9.5"
     }
 }
diff --git a/aws-ts-ansible-wordpress/package.json b/aws-ts-ansible-wordpress/package.json
index 2b5c4b56f..948ef82b3 100644
--- a/aws-ts-ansible-wordpress/package.json
+++ b/aws-ts-ansible-wordpress/package.json
@@ -1,12 +1,12 @@
 {
 		"name": "pulumi-ansible-wordpress",
 		"devDependencies": {
-				"@types/node": "^18"
+				"@types/node": "18.19.68"
 		},
 		"dependencies": {
 				"@pulumi/aws": "6.64.0",
 				"@pulumi/command": "1.0.1",
 				"@pulumi/pulumi": "3.142.0",
-				"typescript": "^5.0.0"
+				"typescript": "5.7.2"
 		}
 }
diff --git a/aws-ts-apigateway-auth0/package.json b/aws-ts-apigateway-auth0/package.json
index c7953ac13..e170c7fd0 100644
--- a/aws-ts-apigateway-auth0/package.json
+++ b/aws-ts-apigateway-auth0/package.json
@@ -1,17 +1,17 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "@types/auth0-js": "^9.10.1",
-        "@types/jsonwebtoken": "^8.3.2",
+        "@types/auth0-js": "9.21.6",
+        "@types/jsonwebtoken": "8.5.9",
         "jsonwebtoken": "9.0.0",
-        "jwks-rsa": "^1.4.0",
-        "typescript": "^4.6.0"
+        "jwks-rsa": "1.12.3",
+        "typescript": "4.9.5"
     }
 }
diff --git a/aws-ts-apigateway-eventbridge/package.json b/aws-ts-apigateway-eventbridge/package.json
index 283fee519..9d3b7a05d 100644
--- a/aws-ts-apigateway-eventbridge/package.json
+++ b/aws-ts-apigateway-eventbridge/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-apigateway-eventbridge",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/aws-ts-apigateway-lambda-serverless/package.json b/aws-ts-apigateway-lambda-serverless/package.json
index 7b6ad0761..e6d563d5a 100644
--- a/aws-ts-apigateway-lambda-serverless/package.json
+++ b/aws-ts-apigateway-lambda-serverless/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-ts-apigateway-lambda-serverless",
     "devDependencies": {
-        "@types/aws-lambda": "^8.10.72",
-        "@types/node": "^10.0.0"
+        "@types/aws-lambda": "8.10.146",
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-apigateway/package.json b/aws-ts-apigateway/package.json
index 7fc3c7a16..21285f3d7 100644
--- a/aws-ts-apigateway/package.json
+++ b/aws-ts-apigateway/package.json
@@ -2,8 +2,8 @@
     "name": "aws-ts-apigateway",
     "version": "0.1.0",
     "dependencies": {
-        "@aws-sdk/client-dynamodb": "^3.423.0",
-        "@aws-sdk/lib-dynamodb": "^3.423.0",
+        "@aws-sdk/client-dynamodb": "3.712.0",
+        "@aws-sdk/lib-dynamodb": "3.712.0",
         "@pulumi/aws": "6.64.0",
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/pulumi": "3.142.0"
diff --git a/aws-ts-apigatewayv2-eventbridge/package.json b/aws-ts-apigatewayv2-eventbridge/package.json
index f049a5ee2..bbe72cf66 100644
--- a/aws-ts-apigatewayv2-eventbridge/package.json
+++ b/aws-ts-apigatewayv2-eventbridge/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-apigatewayv2-eventbridge",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/aws-ts-apigatewayv2-http-api-quickcreate/package.json b/aws-ts-apigatewayv2-http-api-quickcreate/package.json
index f2076a7a0..258f9e438 100644
--- a/aws-ts-apigatewayv2-http-api-quickcreate/package.json
+++ b/aws-ts-apigatewayv2-http-api-quickcreate/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-apigatewayv2-quickstart",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-apigatewayv2-http-api/package.json b/aws-ts-apigatewayv2-http-api/package.json
index 2209c438b..4f12414c4 100644
--- a/aws-ts-apigatewayv2-http-api/package.json
+++ b/aws-ts-apigatewayv2-http-api/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-apigatewayv2-http-api",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-assume-role/assume-role/package.json b/aws-ts-assume-role/assume-role/package.json
index fb2cb41c4..33c3e2a8d 100644
--- a/aws-ts-assume-role/assume-role/package.json
+++ b/aws-ts-assume-role/assume-role/package.json
@@ -1,7 +1,7 @@
 {
     "name": "assume-role",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-assume-role/create-role/package.json b/aws-ts-assume-role/create-role/package.json
index 93984d0e0..e5b8ae19e 100644
--- a/aws-ts-assume-role/create-role/package.json
+++ b/aws-ts-assume-role/create-role/package.json
@@ -1,7 +1,7 @@
 {
     "name": "create-role",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-containers-dockerbuild/app/Dockerfile b/aws-ts-containers-dockerbuild/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/aws-ts-containers-dockerbuild/app/Dockerfile
+++ b/aws-ts-containers-dockerbuild/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/aws-ts-containers-dockerbuild/package.json b/aws-ts-containers-dockerbuild/package.json
index 8627fa240..c09904569 100644
--- a/aws-ts-containers-dockerbuild/package.json
+++ b/aws-ts-containers-dockerbuild/package.json
@@ -8,6 +8,6 @@
         "@pulumi/pulumi": "3.142.0"
     },
     "devDependencies": {
-        "@types/node": "^20.14.10"
+        "@types/node": "20.17.10"
     }
 }
diff --git a/aws-ts-containers-dockerbuildcloud/app/Dockerfile b/aws-ts-containers-dockerbuildcloud/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/aws-ts-containers-dockerbuildcloud/app/Dockerfile
+++ b/aws-ts-containers-dockerbuildcloud/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/aws-ts-containers-dockerbuildcloud/package.json b/aws-ts-containers-dockerbuildcloud/package.json
index bdcbc1429..c09904569 100644
--- a/aws-ts-containers-dockerbuildcloud/package.json
+++ b/aws-ts-containers-dockerbuildcloud/package.json
@@ -8,6 +8,6 @@
         "@pulumi/pulumi": "3.142.0"
     },
     "devDependencies": {
-        "@types/node": "^20.12.11"
+        "@types/node": "20.17.10"
     }
 }
diff --git a/aws-ts-containers/app/Dockerfile b/aws-ts-containers/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/aws-ts-containers/app/Dockerfile
+++ b/aws-ts-containers/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/aws-ts-containers/package.json b/aws-ts-containers/package.json
index 436528986..c3bfa1c21 100644
--- a/aws-ts-containers/package.json
+++ b/aws-ts-containers/package.json
@@ -7,6 +7,6 @@
         "@pulumi/pulumi": "3.142.0"
     },
     "devDependencies": {
-        "typescript": "^4.6.2"
+        "typescript": "4.9.5"
     }
 }
diff --git a/aws-ts-ec2-provisioners/package.json b/aws-ts-ec2-provisioners/package.json
index 560fb6035..c7ff6996e 100755
--- a/aws-ts-ec2-provisioners/package.json
+++ b/aws-ts-ec2-provisioners/package.json
@@ -3,7 +3,7 @@
     "version": "0.1.0",
     "main": "index.js",
     "devDependencies": {
-        "@types/node": "^18"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-ecs-anywhere/app/Dockerfile b/aws-ts-ecs-anywhere/app/Dockerfile
index ed324187a..56e3f1f16 100644
--- a/aws-ts-ecs-anywhere/app/Dockerfile
+++ b/aws-ts-ecs-anywhere/app/Dockerfile
@@ -1,9 +1,9 @@
-FROM node:15-alpine as build
+FROM node:15-alpine@sha256:6edd37368174c15d4cc59395ca2643be8e2a1c9846714bc92c5f5c5a92fb8929 as build
 WORKDIR /app
 COPY package*.json .
 RUN npm ci --only=production
 COPY index.js .
-FROM node:15-alpine
+FROM node:15-alpine@sha256:6edd37368174c15d4cc59395ca2643be8e2a1c9846714bc92c5f5c5a92fb8929
 WORKDIR /app
 COPY --from=build /app .
 EXPOSE 80
diff --git a/aws-ts-ecs-anywhere/app/package.json b/aws-ts-ecs-anywhere/app/package.json
index 729e729a9..aa1f5465a 100644
--- a/aws-ts-ecs-anywhere/app/package.json
+++ b/aws-ts-ecs-anywhere/app/package.json
@@ -10,7 +10,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@types/express": "^4.17.11",
-    "express": "^4.17.1"
+    "@types/express": "4.17.21",
+    "express": "4.21.2"
   }
 }
diff --git a/aws-ts-ecs-anywhere/package.json b/aws-ts-ecs-anywhere/package.json
index 6b473d6e0..4b2412344 100644
--- a/aws-ts-ecs-anywhere/package.json
+++ b/aws-ts-ecs-anywhere/package.json
@@ -1,7 +1,7 @@
 {
   "name": "ecs-anywhere",
   "devDependencies": {
-    "@types/node": "^18.0.0"
+    "@types/node": "18.19.68"
   },
   "dependencies": {
     "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-eks-distro/package.json b/aws-ts-eks-distro/package.json
index 29cbcc29d..58f6210dd 100644
--- a/aws-ts-eks-distro/package.json
+++ b/aws-ts-eks-distro/package.json
@@ -1,16 +1,16 @@
 {
     "name": "aws-ts-eks-distro",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/kubernetes": "4.18.4",
         "@pulumi/pulumi": "3.142.0",
-        "@types/mustache": "^4.0.1",
-        "@types/tmp": "^0.2.0",
-        "mustache": "^4.0.1",
-        "tmp": "^0.2.1"
+        "@types/mustache": "4.2.5",
+        "@types/tmp": "0.2.6",
+        "mustache": "4.2.0",
+        "tmp": "0.2.3"
     }
 }
diff --git a/aws-ts-eks-hello-world/package.json b/aws-ts-eks-hello-world/package.json
index 10e3999a3..2ff71a891 100644
--- a/aws-ts-eks-hello-world/package.json
+++ b/aws-ts-eks-hello-world/package.json
@@ -6,6 +6,6 @@
         "@pulumi/eks": "3.4.0",
         "@pulumi/kubernetes": "4.18.4",
         "@pulumi/pulumi": "3.142.0",
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     }
 }
diff --git a/aws-ts-eks-migrate-nodegroups/package.json b/aws-ts-eks-migrate-nodegroups/package.json
index 84dafe4ea..b9d1f9cd8 100644
--- a/aws-ts-eks-migrate-nodegroups/package.json
+++ b/aws-ts-eks-migrate-nodegroups/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-ts-eks-migrate-nodegroups",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-eks/package.json b/aws-ts-eks/package.json
index bb9cf8051..b5b80151a 100644
--- a/aws-ts-eks/package.json
+++ b/aws-ts-eks/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-ts-eks",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-hello-fargate/app/Dockerfile b/aws-ts-hello-fargate/app/Dockerfile
index 51191659f..c79961397 100644
--- a/aws-ts-hello-fargate/app/Dockerfile
+++ b/aws-ts-hello-fargate/app/Dockerfile
@@ -1,5 +1,5 @@
 # Use an official Python runtime as a parent image
-FROM python:2.7-slim
+FROM python:2.7-slim@sha256:6c1ffdff499e29ea663e6e67c9b6b9a3b401d554d2c9f061f9a45344e3992363
 
 # Set the working directory to /app
 WORKDIR /app
diff --git a/aws-ts-hello-fargate/package.json b/aws-ts-hello-fargate/package.json
index 245c49874..929dde449 100644
--- a/aws-ts-hello-fargate/package.json
+++ b/aws-ts-hello-fargate/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^18.13.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-k8s-mern-voting-app/clientside/Dockerfile b/aws-ts-k8s-mern-voting-app/clientside/Dockerfile
index 98e3c835b..cfdaff3db 100644
--- a/aws-ts-k8s-mern-voting-app/clientside/Dockerfile
+++ b/aws-ts-k8s-mern-voting-app/clientside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-mern-voting-app/clientside/client/package.json b/aws-ts-k8s-mern-voting-app/clientside/client/package.json
index 4a41042ac..9b00bd177 100644
--- a/aws-ts-k8s-mern-voting-app/clientside/client/package.json
+++ b/aws-ts-k8s-mern-voting-app/clientside/client/package.json
@@ -3,11 +3,11 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "@testing-library/jest-dom": "^4.2.4",
-    "@testing-library/react": "^9.3.2",
-    "@testing-library/user-event": "^7.1.2",
-    "react": "^16.13.0",
-    "react-dom": "^16.13.0",
+    "@testing-library/jest-dom": "4.2.4",
+    "@testing-library/react": "9.5.0",
+    "@testing-library/user-event": "7.2.1",
+    "react": "16.14.0",
+    "react-dom": "16.14.0",
     "react-scripts": "3.4.0"
   },
   "scripts": {
diff --git a/aws-ts-k8s-mern-voting-app/databaseside/Dockerfile b/aws-ts-k8s-mern-voting-app/databaseside/Dockerfile
index 5e2794040..6cceb6c21 100644
--- a/aws-ts-k8s-mern-voting-app/databaseside/Dockerfile
+++ b/aws-ts-k8s-mern-voting-app/databaseside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-mern-voting-app/package.json b/aws-ts-k8s-mern-voting-app/package.json
index a8f421a25..1d76ce912 100644
--- a/aws-ts-k8s-mern-voting-app/package.json
+++ b/aws-ts-k8s-mern-voting-app/package.json
@@ -2,8 +2,8 @@
     "name": "voting-app",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-k8s-mern-voting-app/serverside/Dockerfile b/aws-ts-k8s-mern-voting-app/serverside/Dockerfile
index a3854bd65..2be3c8002 100755
--- a/aws-ts-k8s-mern-voting-app/serverside/Dockerfile
+++ b/aws-ts-k8s-mern-voting-app/serverside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-mern-voting-app/serverside/server/package.json b/aws-ts-k8s-mern-voting-app/serverside/server/package.json
index 5c1bda248..2e30cd085 100644
--- a/aws-ts-k8s-mern-voting-app/serverside/server/package.json
+++ b/aws-ts-k8s-mern-voting-app/serverside/server/package.json
@@ -7,8 +7,8 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {
-    "cors": "^2.8.5",
-    "express": "^4.17.1",
-    "mongoose": "^5.4.0"
+    "cors": "2.8.5",
+    "express": "4.21.2",
+    "mongoose": "5.13.22"
   }
 }
diff --git a/aws-ts-k8s-voting-app/clientside/Dockerfile b/aws-ts-k8s-voting-app/clientside/Dockerfile
index 98e3c835b..cfdaff3db 100644
--- a/aws-ts-k8s-voting-app/clientside/Dockerfile
+++ b/aws-ts-k8s-voting-app/clientside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-voting-app/clientside/client/package.json b/aws-ts-k8s-voting-app/clientside/client/package.json
index 4a41042ac..9b00bd177 100644
--- a/aws-ts-k8s-voting-app/clientside/client/package.json
+++ b/aws-ts-k8s-voting-app/clientside/client/package.json
@@ -3,11 +3,11 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "@testing-library/jest-dom": "^4.2.4",
-    "@testing-library/react": "^9.3.2",
-    "@testing-library/user-event": "^7.1.2",
-    "react": "^16.13.0",
-    "react-dom": "^16.13.0",
+    "@testing-library/jest-dom": "4.2.4",
+    "@testing-library/react": "9.5.0",
+    "@testing-library/user-event": "7.2.1",
+    "react": "16.14.0",
+    "react-dom": "16.14.0",
     "react-scripts": "3.4.0"
   },
   "scripts": {
diff --git a/aws-ts-k8s-voting-app/databaseside/Dockerfile b/aws-ts-k8s-voting-app/databaseside/Dockerfile
index e98e7e1ad..981297f86 100644
--- a/aws-ts-k8s-voting-app/databaseside/Dockerfile
+++ b/aws-ts-k8s-voting-app/databaseside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-voting-app/package.json b/aws-ts-k8s-voting-app/package.json
index 0402d9849..58c1b36a5 100644
--- a/aws-ts-k8s-voting-app/package.json
+++ b/aws-ts-k8s-voting-app/package.json
@@ -2,8 +2,8 @@
     "name": "voting-app",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
@@ -11,6 +11,6 @@
         "@pulumi/eks": "3.4.0",
         "@pulumi/postgresql": "3.14.0",
         "@pulumi/pulumi": "3.142.0",
-        "pg": "^8.3.3"
+        "pg": "8.13.1"
     }
 }
diff --git a/aws-ts-k8s-voting-app/serverside/Dockerfile b/aws-ts-k8s-voting-app/serverside/Dockerfile
index 1173c0179..e338e568c 100755
--- a/aws-ts-k8s-voting-app/serverside/Dockerfile
+++ b/aws-ts-k8s-voting-app/serverside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-k8s-voting-app/serverside/server/package.json b/aws-ts-k8s-voting-app/serverside/server/package.json
index dce57d86f..65b569ba7 100644
--- a/aws-ts-k8s-voting-app/serverside/server/package.json
+++ b/aws-ts-k8s-voting-app/serverside/server/package.json
@@ -7,10 +7,10 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {
-    "cors": "^2.8.5",
-    "express": "^4.17.1",
-    "pg": "^8.3.3",
-    "postgres": "^1.0.2",
+    "cors": "2.8.5",
+    "express": "4.21.2",
+    "pg": "8.13.1",
+    "postgres": "1.0.2",
     "postgresql": "0.0.1"
   }
 }
diff --git a/aws-ts-lambda-efs/package.json b/aws-ts-lambda-efs/package.json
index d1db3d33f..a2acdfdab 100644
--- a/aws-ts-lambda-efs/package.json
+++ b/aws-ts-lambda-efs/package.json
@@ -6,7 +6,7 @@
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "@pulumiverse/time": "^0.0.17",
-        "aws-lambda": "^1.0.7"
+        "@pulumiverse/time": "0.0.17",
+        "aws-lambda": "1.0.7"
     }
 }
diff --git a/aws-ts-lambda-slack/package.json b/aws-ts-lambda-slack/package.json
index 9d4b51b80..a0b2f4a9e 100644
--- a/aws-ts-lambda-slack/package.json
+++ b/aws-ts-lambda-slack/package.json
@@ -2,8 +2,8 @@
     "name": "aws-ts-lambda-slack",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^22",
-        "typescript": "^5.6.2"
+        "@types/node": "22.10.2",
+        "typescript": "5.7.2"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-lambda-thumbnailer/app/Dockerfile b/aws-ts-lambda-thumbnailer/app/Dockerfile
index 7692fd31c..28831a57c 100644
--- a/aws-ts-lambda-thumbnailer/app/Dockerfile
+++ b/aws-ts-lambda-thumbnailer/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM amazon/aws-lambda-nodejs:12
+FROM amazon/aws-lambda-nodejs:12@sha256:1296174701453f63a24c1157c22289b236d92f379d478cc93b00dda2873c2ed4
 ARG FUNCTION_DIR="/var/task"
 
 # Install tar and xz
diff --git a/aws-ts-langserve/Dockerfile b/aws-ts-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-ts-langserve/Dockerfile
+++ b/aws-ts-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-ts-langserve/package.json b/aws-ts-langserve/package.json
index 897eb5daf..2391a3014 100644
--- a/aws-ts-langserve/package.json
+++ b/aws-ts-langserve/package.json
@@ -1,10 +1,10 @@
 {
 	"name": "aws-ts-langserve",
 	"devDependencies": {
-		"@types/node": "^14"
+		"@types/node": "14.18.63"
 	},
 	"dependencies": {
-		"typescript": "^4.0.0",
+		"typescript": "4.9.5",
 		"@pulumi/pulumi": "3.142.0",
 		"@pulumi/aws": "6.64.0",
 		"@pulumi/docker": "4.5.7"
diff --git a/aws-ts-langserve/poetry.lock b/aws-ts-langserve/poetry.lock
index 6e8ce58a5..db9965b3f 100644
--- a/aws-ts-langserve/poetry.lock
+++ b/aws-ts-langserve/poetry.lock
@@ -1795,5 +1795,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "1fd29dc8bbde957e67e6215655fad52b6a7e5f96cbee55be345e15ec46ce4f2d"
diff --git a/aws-ts-langserve/pyproject.toml b/aws-ts-langserve/pyproject.toml
index 0961d195b..55eb0ee88 100644
--- a/aws-ts-langserve/pyproject.toml
+++ b/aws-ts-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/aws-ts-localai-flowise/package.json b/aws-ts-localai-flowise/package.json
index 255c9183b..4e5054520 100644
--- a/aws-ts-localai-flowise/package.json
+++ b/aws-ts-localai-flowise/package.json
@@ -1,15 +1,15 @@
 {
   "name": "civo-navigate",
   "devDependencies": {
-    "@types/node": "^18"
+    "@types/node": "18.19.68"
   },
   "dependencies": {
-    "typescript": "^4.0.0",
+    "typescript": "4.9.5",
     "@pulumi/pulumi": "3.142.0",
     "@pulumi/eks": "3.4.0",
     "@pulumi/aws": "6.64.0",
     "@pulumi/docker": "4.5.7",
     "@pulumi/kubernetes": "4.18.4",
-    "@pinecone-database/pulumi": "^0.4.0"
+    "@pinecone-database/pulumi": "0.4.3"
   }
 }
diff --git a/aws-ts-netlify-cms-and-oauth/cms-oauth/.github/workflows/build-and-deploy.yml b/aws-ts-netlify-cms-and-oauth/cms-oauth/.github/workflows/build-and-deploy.yml
index 54b2ade9a..dc45f655c 100644
--- a/aws-ts-netlify-cms-and-oauth/cms-oauth/.github/workflows/build-and-deploy.yml
+++ b/aws-ts-netlify-cms-and-oauth/cms-oauth/.github/workflows/build-and-deploy.yml
@@ -13,7 +13,7 @@ jobs:
     name: Install deps and update infrastructure
     runs-on: ubuntu-latest
     steps: 
-        - uses: actions/checkout@v2
+        - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
         - name: Install Pulumi CLI
           uses: pulumi/action-install-pulumi-cli@releases/v1
diff --git a/aws-ts-netlify-cms-and-oauth/cms-oauth/Dockerfile b/aws-ts-netlify-cms-and-oauth/cms-oauth/Dockerfile
index 528e26c22..84972afdd 100644
--- a/aws-ts-netlify-cms-and-oauth/cms-oauth/Dockerfile
+++ b/aws-ts-netlify-cms-and-oauth/cms-oauth/Dockerfile
@@ -9,7 +9,7 @@ RUN go mod download
 RUN go install ./
 RUN ls /go/bin
 
-FROM alpine:3.12
+FROM alpine:3.12@sha256:c75ac27b49326926b803b9ed43bf088bc220d22556de1bc5f72d742c91398f69
 
 RUN apk --no-cache add ca-certificates
 
diff --git a/aws-ts-netlify-cms-and-oauth/cms-oauth/infrastructure/package.json b/aws-ts-netlify-cms-and-oauth/cms-oauth/infrastructure/package.json
index f9ad4e875..750e61b3a 100644
--- a/aws-ts-netlify-cms-and-oauth/cms-oauth/infrastructure/package.json
+++ b/aws-ts-netlify-cms-and-oauth/cms-oauth/infrastructure/package.json
@@ -1,7 +1,7 @@
 {
     "name": "netlify-cms-oauth-provider-infrastructure",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-netlify-cms-and-oauth/cms/.github/workflows/deployCMS.yml b/aws-ts-netlify-cms-and-oauth/cms/.github/workflows/deployCMS.yml
index c5e85fd16..52b584a59 100644
--- a/aws-ts-netlify-cms-and-oauth/cms/.github/workflows/deployCMS.yml
+++ b/aws-ts-netlify-cms-and-oauth/cms/.github/workflows/deployCMS.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Install cms deps
         run: yarn install
diff --git a/aws-ts-netlify-cms-and-oauth/cms/infrastructure/package.json b/aws-ts-netlify-cms-and-oauth/cms/infrastructure/package.json
index b550876f6..50757668e 100644
--- a/aws-ts-netlify-cms-and-oauth/cms/infrastructure/package.json
+++ b/aws-ts-netlify-cms-and-oauth/cms/infrastructure/package.json
@@ -1,13 +1,13 @@
 {
     "name": "pulumi-website-cms",
     "devDependencies": {
-        "@types/mime": "^3.0.0",
-        "@types/node": "^18.0.0"
+        "@types/mime": "3.0.4",
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.4.6"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-ts-netlify-cms-and-oauth/cms/package.json b/aws-ts-netlify-cms-and-oauth/cms/package.json
index dd1eeb33b..afc34bbef 100644
--- a/aws-ts-netlify-cms-and-oauth/cms/package.json
+++ b/aws-ts-netlify-cms-and-oauth/cms/package.json
@@ -9,13 +9,13 @@
     "eject": "echo \"react-scripts eject\""
   },
   "dependencies": {
-    "netlify-cms-app": "^2.12.19",
-    "react": "^16.8.4",
-    "react-dom": "^16.8.4",
-    "react-scripts": "^2.1.8"
+    "netlify-cms-app": "2.15.72",
+    "react": "16.14.0",
+    "react-dom": "16.14.0",
+    "react-scripts": "2.1.8"
   },
   "devDependencies": {
-    "netlify-cms-backend-fs": "^0.4.3"
+    "netlify-cms-backend-fs": "0.4.4"
   },
   "eslintConfig": {
     "extends": "react-app"
diff --git a/aws-ts-nextjs/demoapp/package.json b/aws-ts-nextjs/demoapp/package.json
index 0a4a4a3f4..3b1549824 100644
--- a/aws-ts-nextjs/demoapp/package.json
+++ b/aws-ts-nextjs/demoapp/package.json
@@ -23,7 +23,7 @@
     "typescript": "5.1.6"
   },
   "devDependencies": {
-    "sst": "^2.23.3",
+    "sst": "2.45.1",
     "aws-cdk-lib": "2.84.0",
     "constructs": "10.1.156"
   }
diff --git a/aws-ts-nextjs/package.json b/aws-ts-nextjs/package.json
index 47317a5ba..97ee7d56c 100644
--- a/aws-ts-nextjs/package.json
+++ b/aws-ts-nextjs/package.json
@@ -5,13 +5,13 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "glob": "^8.0.3",
-        "mime": "^2.0.3"
+        "glob": "8.1.0",
+        "mime": "2.6.0"
     },
     "devDependencies": {
-        "@types/glob": "^8.0.3",
-        "@types/mime": "^2.0.0",
-        "@types/node": "^10.0.0",
+        "@types/glob": "8.1.0",
+        "@types/mime": "2.0.3",
+        "@types/node": "10.17.60",
         "typescript": "4.7.4"
     }
 }
diff --git a/aws-ts-oidc-provider-pulumi-cloud/package.json b/aws-ts-oidc-provider-pulumi-cloud/package.json
index 49513aab9..1fcfaaed0 100644
--- a/aws-ts-oidc-provider-pulumi-cloud/package.json
+++ b/aws-ts-oidc-provider-pulumi-cloud/package.json
@@ -2,8 +2,8 @@
     "name": "aws-ts-oidc-provider-pulumi-cloud",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^22",
-        "typescript": "^5.6.2"
+        "@types/node": "22.10.2",
+        "typescript": "5.7.2"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-organizations/package.json b/aws-ts-organizations/package.json
index caf640cc3..1824114ef 100644
--- a/aws-ts-organizations/package.json
+++ b/aws-ts-organizations/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-organizations",
     "devDependencies": {
-        "@types/node": "^18",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-pern-voting-app/clientside/Dockerfile b/aws-ts-pern-voting-app/clientside/Dockerfile
index 98e3c835b..cfdaff3db 100644
--- a/aws-ts-pern-voting-app/clientside/Dockerfile
+++ b/aws-ts-pern-voting-app/clientside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-pern-voting-app/clientside/client/package.json b/aws-ts-pern-voting-app/clientside/client/package.json
index 4a41042ac..9b00bd177 100644
--- a/aws-ts-pern-voting-app/clientside/client/package.json
+++ b/aws-ts-pern-voting-app/clientside/client/package.json
@@ -3,11 +3,11 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "@testing-library/jest-dom": "^4.2.4",
-    "@testing-library/react": "^9.3.2",
-    "@testing-library/user-event": "^7.1.2",
-    "react": "^16.13.0",
-    "react-dom": "^16.13.0",
+    "@testing-library/jest-dom": "4.2.4",
+    "@testing-library/react": "9.5.0",
+    "@testing-library/user-event": "7.2.1",
+    "react": "16.14.0",
+    "react-dom": "16.14.0",
     "react-scripts": "3.4.0"
   },
   "scripts": {
diff --git a/aws-ts-pern-voting-app/package.json b/aws-ts-pern-voting-app/package.json
index cab5134b0..67aff9b44 100644
--- a/aws-ts-pern-voting-app/package.json
+++ b/aws-ts-pern-voting-app/package.json
@@ -2,14 +2,14 @@
     "name": "voting-app",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/postgresql": "3.14.0",
         "@pulumi/pulumi": "3.142.0",
-        "pg": "^8.6.0"
+        "pg": "8.13.1"
     }
 }
diff --git a/aws-ts-pern-voting-app/serverside/Dockerfile b/aws-ts-pern-voting-app/serverside/Dockerfile
index 1173c0179..e338e568c 100755
--- a/aws-ts-pern-voting-app/serverside/Dockerfile
+++ b/aws-ts-pern-voting-app/serverside/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:18.04
+FROM ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
 
 WORKDIR /
 
diff --git a/aws-ts-pern-voting-app/serverside/server/package.json b/aws-ts-pern-voting-app/serverside/server/package.json
index dce57d86f..65b569ba7 100644
--- a/aws-ts-pern-voting-app/serverside/server/package.json
+++ b/aws-ts-pern-voting-app/serverside/server/package.json
@@ -7,10 +7,10 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {
-    "cors": "^2.8.5",
-    "express": "^4.17.1",
-    "pg": "^8.3.3",
-    "postgres": "^1.0.2",
+    "cors": "2.8.5",
+    "express": "4.21.2",
+    "pg": "8.13.1",
+    "postgres": "1.0.2",
     "postgresql": "0.0.1"
   }
 }
diff --git a/aws-ts-pulumi-miniflux/package.json b/aws-ts-pulumi-miniflux/package.json
index c0c5052c0..dc9d43423 100644
--- a/aws-ts-pulumi-miniflux/package.json
+++ b/aws-ts-pulumi-miniflux/package.json
@@ -1,8 +1,8 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^18.0.0",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-pulumi-webhooks/package.json b/aws-ts-pulumi-webhooks/package.json
index e351ab8b7..4a62152b5 100644
--- a/aws-ts-pulumi-webhooks/package.json
+++ b/aws-ts-pulumi-webhooks/package.json
@@ -1,12 +1,12 @@
 {
     "name": "typescript",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "@slack/webhook": "^5.0.3"
+        "@slack/webhook": "5.0.4"
     }
 }
diff --git a/aws-ts-redshift-glue-etl/package.json b/aws-ts-redshift-glue-etl/package.json
index f42f1d535..70e742895 100644
--- a/aws-ts-redshift-glue-etl/package.json
+++ b/aws-ts-redshift-glue-etl/package.json
@@ -2,8 +2,8 @@
     "name": "aws-ts-redshift-glue-etl",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^18",
-        "typescript": "^4.6.2"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-resources/package.json b/aws-ts-resources/package.json
index fa911075b..03cc1a156 100644
--- a/aws-ts-resources/package.json
+++ b/aws-ts-resources/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-resources",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-ruby-on-rails/package.json b/aws-ts-ruby-on-rails/package.json
index c73394556..8463f0509 100644
--- a/aws-ts-ruby-on-rails/package.json
+++ b/aws-ts-ruby-on-rails/package.json
@@ -4,6 +4,6 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "pcloudinit": "^0.1.0"
+        "pcloudinit": "0.1.0"
     }
 }
diff --git a/aws-ts-s3-folder/package.json b/aws-ts-s3-folder/package.json
index d97e63bd6..1f3f3ddd3 100644
--- a/aws-ts-s3-folder/package.json
+++ b/aws-ts-s3-folder/package.json
@@ -1,12 +1,12 @@
 {
     "name": "aws-ts-s3-folder",
     "devDependencies": {
-        "@types/mime": "^2.0.3",
-        "@types/node": "^10.0.0"
+        "@types/mime": "2.0.3",
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.5.2"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-ts-s3-lambda-copyzip/package.json b/aws-ts-s3-lambda-copyzip/package.json
index b79b81782..f7832e3e3 100644
--- a/aws-ts-s3-lambda-copyzip/package.json
+++ b/aws-ts-s3-lambda-copyzip/package.json
@@ -1,12 +1,12 @@
 {
     "name": "slss-tps",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
-        "@aws-sdk/client-s3": "^3.386.0",
+        "@aws-sdk/client-s3": "3.712.0",
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "adm-zip": "^0.4.13"
+        "adm-zip": "0.4.16"
     }
 }
diff --git a/aws-ts-secrets-manager/package.json b/aws-ts-secrets-manager/package.json
index 5a2c341a7..cdfbd190b 100644
--- a/aws-ts-secrets-manager/package.json
+++ b/aws-ts-secrets-manager/package.json
@@ -1,7 +1,7 @@
 {
   "name": "aws-secrets-manager",
   "devDependencies": {
-    "@types/node": "^10.0.0"
+    "@types/node": "10.17.60"
   },
   "dependencies": {
     "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-serverless-datawarehouse/package.json b/aws-ts-serverless-datawarehouse/package.json
index 2f8da373f..d21efae42 100644
--- a/aws-ts-serverless-datawarehouse/package.json
+++ b/aws-ts-serverless-datawarehouse/package.json
@@ -1,20 +1,20 @@
 {
     "name": "serverless-datawarehouse",
     "devDependencies": {
-        "@types/jest": "^24.9.0",
-        "@types/moment-timezone": "^0.5.12",
-        "@types/node": "^8.0.0",
-        "jest": "^24.9.0",
-        "jest-circus": "^24.9.0",
-        "ts-jest": "^24.3.0"
+        "@types/jest": "24.9.1",
+        "@types/moment-timezone": "0.5.30",
+        "@types/node": "8.10.66",
+        "jest": "24.9.0",
+        "jest-circus": "24.9.0",
+        "ts-jest": "24.3.0"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "athena-client": "^2.5.1",
-        "aws-sdk": "^2.606.0",
-        "moment-timezone": "^0.5.27",
-        "uuid": "^3.4.0"
+        "athena-client": "2.5.1",
+        "aws-sdk": "2.1692.0",
+        "moment-timezone": "0.5.46",
+        "uuid": "3.4.0"
     },
     "scripts": {
         "test": "jest",
diff --git a/aws-ts-slackbot/package.json b/aws-ts-slackbot/package.json
index ef33a3734..afbdb159c 100644
--- a/aws-ts-slackbot/package.json
+++ b/aws-ts-slackbot/package.json
@@ -2,19 +2,19 @@
     "name": "aws-ts-slackbot",
     "version": "0.1.0",
     "dependencies": {
-        "@aws-sdk/client-dynamodb": "^3.417.0",
-        "@aws-sdk/client-sns": "^3.414.0",
-        "@aws-sdk/lib-dynamodb": "^3.417.0",
+        "@aws-sdk/client-dynamodb": "3.712.0",
+        "@aws-sdk/client-sns": "3.712.0",
+        "@aws-sdk/lib-dynamodb": "3.712.0",
         "@pulumi/aws": "6.64.0",
         "@pulumi/aws-apigateway": "2.6.1",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "qs": "^6.7.0",
-        "superagent": "^8.1.0"
+        "qs": "6.13.1",
+        "superagent": "8.1.2"
     },
     "devDependencies": {
-        "@types/qs": "^6.5.2",
-        "@types/superagent": "^4.1.0",
-        "typescript": "^4.6.2"
+        "@types/qs": "6.9.17",
+        "@types/superagent": "4.1.24",
+        "typescript": "4.9.5"
     }
 }
diff --git a/aws-ts-stackreference-architecture/application/package.json b/aws-ts-stackreference-architecture/application/package.json
index fc12559f4..cc0ebe603 100644
--- a/aws-ts-stackreference-architecture/application/package.json
+++ b/aws-ts-stackreference-architecture/application/package.json
@@ -2,18 +2,18 @@
   "name": "aws-typescript",
   "main": "src/index.ts",
   "devDependencies": {
-    "@types/mime": "^2.0.1",
+    "@types/mime": "2.0.3",
     "@types/node": "latest",
-    "typescript": "^4"
+    "typescript": "4.9.5"
   },
   "dependencies": {
     "@pulumi/aws": "latest",
     "@pulumi/awsx": "2.19.0",
     "@pulumi/newrelic": "latest",
     "@pulumi/pulumi": "latest",
-    "ip-address": "^5.9.2",
-    "jsbn": "^1.1.0",
-    "mime": "^2.4.4"
+    "ip-address": "5.9.4",
+    "jsbn": "1.1.0",
+    "mime": "2.6.0"
   },
   "scripts": {
     "tslint-fix": "tslint --fix -p tsconfig.json"
diff --git a/aws-ts-stackreference-architecture/application/src/backend/Dockerfile b/aws-ts-stackreference-architecture/application/src/backend/Dockerfile
index 3db01580a..8660164b9 100644
--- a/aws-ts-stackreference-architecture/application/src/backend/Dockerfile
+++ b/aws-ts-stackreference-architecture/application/src/backend/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.7-alpine
+FROM python:3.7-alpine@sha256:f3d31c8677d03f0b3c724446077f229a6ce9d3ac430f5c08cd7dff00292048c3
 COPY . /app
 WORKDIR /app
 EXPOSE 80
diff --git a/aws-ts-stackreference-architecture/database/package.json b/aws-ts-stackreference-architecture/database/package.json
index 70394622b..fe1a21532 100644
--- a/aws-ts-stackreference-architecture/database/package.json
+++ b/aws-ts-stackreference-architecture/database/package.json
@@ -2,17 +2,17 @@
   "name": "aws-typescript",
   "main": "src/index.ts",
   "devDependencies": {
-    "@types/mime": "^2.0.1",
+    "@types/mime": "2.0.3",
     "@types/node": "latest",
-    "typescript": "^4"
+    "typescript": "4.9.5"
   },
   "dependencies": {
     "@pulumi/aws": "latest",
     "@pulumi/pulumi": "latest",
     "@pulumi/random": "latest",
-    "ip-address": "^5.9.2",
-    "jsbn": "^1.1.0",
-    "mime": "^2.4.4"
+    "ip-address": "5.9.4",
+    "jsbn": "1.1.0",
+    "mime": "2.6.0"
   },
   "scripts": {
     "tslint-fix": "tslint --fix -p tsconfig.json"
diff --git a/aws-ts-stackreference-architecture/networking/package.json b/aws-ts-stackreference-architecture/networking/package.json
index fc12559f4..cc0ebe603 100644
--- a/aws-ts-stackreference-architecture/networking/package.json
+++ b/aws-ts-stackreference-architecture/networking/package.json
@@ -2,18 +2,18 @@
   "name": "aws-typescript",
   "main": "src/index.ts",
   "devDependencies": {
-    "@types/mime": "^2.0.1",
+    "@types/mime": "2.0.3",
     "@types/node": "latest",
-    "typescript": "^4"
+    "typescript": "4.9.5"
   },
   "dependencies": {
     "@pulumi/aws": "latest",
     "@pulumi/awsx": "2.19.0",
     "@pulumi/newrelic": "latest",
     "@pulumi/pulumi": "latest",
-    "ip-address": "^5.9.2",
-    "jsbn": "^1.1.0",
-    "mime": "^2.4.4"
+    "ip-address": "5.9.4",
+    "jsbn": "1.1.0",
+    "mime": "2.6.0"
   },
   "scripts": {
     "tslint-fix": "tslint --fix -p tsconfig.json"
diff --git a/aws-ts-stackreference/company/package.json b/aws-ts-stackreference/company/package.json
index 792ebe8b4..244501ec0 100644
--- a/aws-ts-stackreference/company/package.json
+++ b/aws-ts-stackreference/company/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-stackreference/department/package.json b/aws-ts-stackreference/department/package.json
index 792ebe8b4..244501ec0 100644
--- a/aws-ts-stackreference/department/package.json
+++ b/aws-ts-stackreference/department/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-stackreference/team/package.json b/aws-ts-stackreference/team/package.json
index 792ebe8b4..244501ec0 100644
--- a/aws-ts-stackreference/team/package.json
+++ b/aws-ts-stackreference/team/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-static-website/package.json b/aws-ts-static-website/package.json
index 7ccd01dcf..808ab9239 100644
--- a/aws-ts-static-website/package.json
+++ b/aws-ts-static-website/package.json
@@ -1,12 +1,12 @@
 {
     "name": "aws-static-website-example",
     "devDependencies": {
-        "@types/mime": "^2.0.0",
-        "@types/node": "^8.0.0"
+        "@types/mime": "2.0.3",
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "mime": "^2.0.3"
+        "mime": "2.6.0"
     }
 }
diff --git a/aws-ts-stepfunctions/package.json b/aws-ts-stepfunctions/package.json
index 95fbcabbe..122c013c7 100644
--- a/aws-ts-stepfunctions/package.json
+++ b/aws-ts-stepfunctions/package.json
@@ -1,7 +1,7 @@
 {
     "name": "stepfunctions",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-synthetics-canary/package.json b/aws-ts-synthetics-canary/package.json
index 79dbe2918..406e6effe 100644
--- a/aws-ts-synthetics-canary/package.json
+++ b/aws-ts-synthetics-canary/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-synthetics",
     "devDependencies": {
-        "@types/node": "^18"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-thumbnailer/docker-ffmpeg-thumb/Dockerfile b/aws-ts-thumbnailer/docker-ffmpeg-thumb/Dockerfile
index afd2c293c..c366e23b0 100644
--- a/aws-ts-thumbnailer/docker-ffmpeg-thumb/Dockerfile
+++ b/aws-ts-thumbnailer/docker-ffmpeg-thumb/Dockerfile
@@ -1,4 +1,4 @@
-FROM jrottenberg/ffmpeg
+FROM jrottenberg/ffmpeg@sha256:21eb739725c43bd7187982e5fa4b5371b495d1d1f6f61ae1719ca794817f8641
 
 RUN apt-get update --yes && \
     apt-get install curl unzip --yes && \
diff --git a/aws-ts-twitter-athena/package.json b/aws-ts-twitter-athena/package.json
index da7e96dd8..eb55f972f 100644
--- a/aws-ts-twitter-athena/package.json
+++ b/aws-ts-twitter-athena/package.json
@@ -2,12 +2,12 @@
     "name": "aws-ts-twitter-athena",
     "version": "0.1.0",
     "dependencies": {
-        "@aws-sdk/client-s3": "^3.386.0",
+        "@aws-sdk/client-s3": "3.712.0",
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "twitter": "^1.7.1"
+        "twitter": "1.7.1"
     },
     "devDependencies": {
-        "@types/twitter": "^0.0.28"
+        "@types/twitter": "0.0.28"
     }
 }
diff --git a/aws-ts-url-shortener-cache-http/package.json b/aws-ts-url-shortener-cache-http/package.json
index 9897b625e..e6cdabfdb 100644
--- a/aws-ts-url-shortener-cache-http/package.json
+++ b/aws-ts-url-shortener-cache-http/package.json
@@ -7,22 +7,22 @@
         "build": "tsc"
     },
     "devDependencies": {
-        "@types/express": "^4.16.0",
-        "@types/mime-types": "^2.1.0",
-        "@types/node": "^8.0.0",
-        "@types/parseurl": "^1.3.1",
-        "@types/send": "^0.14.4"
+        "@types/express": "4.17.21",
+        "@types/mime-types": "2.1.4",
+        "@types/node": "8.10.66",
+        "@types/parseurl": "1.3.3",
+        "@types/send": "0.14.7"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/cloud-aws": "0.40.2",
         "@pulumi/pulumi": "3.142.0",
-        "express": "^4.16.3",
-        "mime-types": "^2.1.20",
-        "parseurl": "^1.3.2",
+        "express": "4.21.2",
+        "mime-types": "2.1.35",
+        "parseurl": "1.3.3",
         "redis": "3.1.1",
-        "send": "^0.16.2"
+        "send": "0.16.2"
     },
     "peerDependencies": {}
 }
diff --git a/aws-ts-voting-app/frontend/Dockerfile b/aws-ts-voting-app/frontend/Dockerfile
index 690a4775b..efdb78f62 100755
--- a/aws-ts-voting-app/frontend/Dockerfile
+++ b/aws-ts-voting-app/frontend/Dockerfile
@@ -1,3 +1,3 @@
-FROM tiangolo/uwsgi-nginx-flask:python3.6
+FROM tiangolo/uwsgi-nginx-flask:python3.6@sha256:07b3a61dc2f6d6b294065f929d33cdf6416133320cf61cc66b7cdb1428460e75
 RUN  pip install redis
 COPY /app /app
diff --git a/aws-ts-voting-app/package.json b/aws-ts-voting-app/package.json
index 1101bd5f6..65e3e5834 100644
--- a/aws-ts-voting-app/package.json
+++ b/aws-ts-voting-app/package.json
@@ -2,7 +2,7 @@
     "name": "voting-app",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-vpc-with-ecs-fargate-py/vpc-crosswalk-ts/package.json b/aws-ts-vpc-with-ecs-fargate-py/vpc-crosswalk-ts/package.json
index faabd8c1c..ecf455868 100644
--- a/aws-ts-vpc-with-ecs-fargate-py/vpc-crosswalk-ts/package.json
+++ b/aws-ts-vpc-with-ecs-fargate-py/vpc-crosswalk-ts/package.json
@@ -1,7 +1,7 @@
 {
     "name": "crosswalk-vpc",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-webserver/package.json b/aws-ts-webserver/package.json
index 461aab83b..7d1290338 100644
--- a/aws-ts-webserver/package.json
+++ b/aws-ts-webserver/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-ts-webserver",
     "devDependencies": {
-        "@types/node": "^18.0.0"
+        "@types/node": "18.19.68"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-ts-wordpress-fargate-rds/package.json b/aws-ts-wordpress-fargate-rds/package.json
index 032015d39..410557774 100644
--- a/aws-ts-wordpress-fargate-rds/package.json
+++ b/aws-ts-wordpress-fargate-rds/package.json
@@ -2,7 +2,7 @@
     "name": "aws-ts-wordpress-fargate-rds",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/aws-yaml-langserve/Dockerfile b/aws-yaml-langserve/Dockerfile
index bbdeea13b..230864610 100644
--- a/aws-yaml-langserve/Dockerfile
+++ b/aws-yaml-langserve/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim@sha256:370c586a6ffc8c619e6d652f81c094b34b14b8f2fb9251f092de23f16e299b78
 
 RUN pip install poetry==1.6.1
 
diff --git a/aws-yaml-langserve/poetry.lock b/aws-yaml-langserve/poetry.lock
index 6e8ce58a5..db9965b3f 100644
--- a/aws-yaml-langserve/poetry.lock
+++ b/aws-yaml-langserve/poetry.lock
@@ -1795,5 +1795,5 @@ multidict = ">=4.0"
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.11"
-content-hash = "89ff40e7422c5c7a5d72b2d2084f6ce62f6b69d5be9186bbf43cc210d2572668"
+python-versions = "3.13.1"
+content-hash = "1fd29dc8bbde957e67e6215655fad52b6a7e5f96cbee55be345e15ec46ce4f2d"
diff --git a/aws-yaml-langserve/pyproject.toml b/aws-yaml-langserve/pyproject.toml
index fc5ad4467..bbe716d75 100644
--- a/aws-yaml-langserve/pyproject.toml
+++ b/aws-yaml-langserve/pyproject.toml
@@ -9,12 +9,12 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.11"
-uvicorn = "^0.23.2"
-langserve = {extras = ["server"], version = ">=0.0.30"}
-pydantic = "<2"
-openai = "^1.10.0"
-langchain-openai = "^0.0.5"
+python = "3.13.1"
+uvicorn = "0.23.2"
+langserve = {extras = ["server"], version = "==0.0.41"}
+pydantic = "==1.10.14"
+openai = "1.12.0"
+langchain-openai = "0.0.5"
 
 
 [tool.poetry.group.dev.dependencies]
diff --git a/azure-cs-appservice-docker/node-app/Dockerfile b/azure-cs-appservice-docker/node-app/Dockerfile
index b797db724..2754645ec 100644
--- a/azure-cs-appservice-docker/node-app/Dockerfile
+++ b/azure-cs-appservice-docker/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-cs-appservice-docker/node-app/app/package.json b/azure-cs-appservice-docker/node-app/app/package.json
index 469aaddde..4b76369ff 100644
--- a/azure-cs-appservice-docker/node-app/app/package.json
+++ b/azure-cs-appservice-docker/node-app/app/package.json
@@ -4,8 +4,8 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/azure-cs-containerapps/node-app/Dockerfile b/azure-cs-containerapps/node-app/Dockerfile
index 53bbea666..10c2700a4 100644
--- a/azure-cs-containerapps/node-app/Dockerfile
+++ b/azure-cs-containerapps/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-cs-containerapps/node-app/app/package.json b/azure-cs-containerapps/node-app/app/package.json
index e7b044f05..4fadfd79c 100644
--- a/azure-cs-containerapps/node-app/app/package.json
+++ b/azure-cs-containerapps/node-app/app/package.json
@@ -4,8 +4,8 @@
     "description": "",
     "main": "index.js",
     "dependencies": {
-        "express": "^4.14.0",
-        "morgan": "^1.8.2"
+        "express": "4.21.2",
+        "morgan": "1.10.0"
     },
     "devDependencies": {},
     "author": ""
diff --git a/azure-cs-net5-aks-webapp/app/Dockerfile b/azure-cs-net5-aks-webapp/app/Dockerfile
index b797db724..2754645ec 100644
--- a/azure-cs-net5-aks-webapp/app/Dockerfile
+++ b/azure-cs-net5-aks-webapp/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-cs-net5-aks-webapp/app/app/package.json b/azure-cs-net5-aks-webapp/app/app/package.json
index 469aaddde..4b76369ff 100644
--- a/azure-cs-net5-aks-webapp/app/app/package.json
+++ b/azure-cs-net5-aks-webapp/app/app/package.json
@@ -4,8 +4,8 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/azure-go-appservice-docker/node-app/Dockerfile b/azure-go-appservice-docker/node-app/Dockerfile
index b797db724..2754645ec 100644
--- a/azure-go-appservice-docker/node-app/Dockerfile
+++ b/azure-go-appservice-docker/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-go-appservice-docker/node-app/app/package.json b/azure-go-appservice-docker/node-app/app/package.json
index 469aaddde..4b76369ff 100644
--- a/azure-go-appservice-docker/node-app/app/package.json
+++ b/azure-go-appservice-docker/node-app/app/package.json
@@ -4,8 +4,8 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/azure-go-containerapps/node-app/Dockerfile b/azure-go-containerapps/node-app/Dockerfile
index 53bbea666..10c2700a4 100644
--- a/azure-go-containerapps/node-app/Dockerfile
+++ b/azure-go-containerapps/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-go-containerapps/node-app/app/package.json b/azure-go-containerapps/node-app/app/package.json
index e7b044f05..4fadfd79c 100644
--- a/azure-go-containerapps/node-app/app/package.json
+++ b/azure-go-containerapps/node-app/app/package.json
@@ -4,8 +4,8 @@
     "description": "",
     "main": "index.js",
     "dependencies": {
-        "express": "^4.14.0",
-        "morgan": "^1.8.2"
+        "express": "4.21.2",
+        "morgan": "1.10.0"
     },
     "devDependencies": {},
     "author": ""
diff --git a/azure-py-appservice-docker/node-app/Dockerfile b/azure-py-appservice-docker/node-app/Dockerfile
index b797db724..2754645ec 100644
--- a/azure-py-appservice-docker/node-app/Dockerfile
+++ b/azure-py-appservice-docker/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-py-appservice-docker/node-app/app/package.json b/azure-py-appservice-docker/node-app/app/package.json
index 469aaddde..4b76369ff 100644
--- a/azure-py-appservice-docker/node-app/app/package.json
+++ b/azure-py-appservice-docker/node-app/app/package.json
@@ -4,8 +4,8 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/azure-py-containerapps/node-app/Dockerfile b/azure-py-containerapps/node-app/Dockerfile
index 53bbea666..10c2700a4 100644
--- a/azure-py-containerapps/node-app/Dockerfile
+++ b/azure-py-containerapps/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-py-containerapps/node-app/app/package.json b/azure-py-containerapps/node-app/app/package.json
index e7b044f05..4fadfd79c 100644
--- a/azure-py-containerapps/node-app/app/package.json
+++ b/azure-py-containerapps/node-app/app/package.json
@@ -4,8 +4,8 @@
     "description": "",
     "main": "index.js",
     "dependencies": {
-        "express": "^4.14.0",
-        "morgan": "^1.8.2"
+        "express": "4.21.2",
+        "morgan": "1.10.0"
     },
     "devDependencies": {},
     "author": ""
diff --git a/azure-ts-aci/package.json b/azure-ts-aci/package.json
index beff92b76..8d5d117ed 100644
--- a/azure-ts-aci/package.json
+++ b/azure-ts-aci/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-aci",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-aks-helm/package.json b/azure-ts-aks-helm/package.json
index 1a9a42ee7..9813b8476 100644
--- a/azure-ts-aks-helm/package.json
+++ b/azure-ts-aks-helm/package.json
@@ -1,7 +1,7 @@
 {
     "name": "azure-ts-aks-helm",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-aks-managed-identity/package.json b/azure-ts-aks-managed-identity/package.json
index 0fab5387e..fdbac315b 100644
--- a/azure-ts-aks-managed-identity/package.json
+++ b/azure-ts-aks-managed-identity/package.json
@@ -1,10 +1,10 @@
 {
 	"name": "azure-yaml-aks-managed-identity",
 	"devDependencies": {
-		"@types/node": "^14"
+		"@types/node": "14.18.63"
 	},
 	"dependencies": {
-		"typescript": "^4.0.0",
+		"typescript": "4.9.5",
 		"@pulumi/pulumi": "3.142.0",
 		"@pulumi/azure-native": "2.76.0",
 		"@pulumi/tls": "5.0.9"
diff --git a/azure-ts-aks-multicluster/package.json b/azure-ts-aks-multicluster/package.json
index 45d4992c6..f84f7f524 100644
--- a/azure-ts-aks-multicluster/package.json
+++ b/azure-ts-aks-multicluster/package.json
@@ -1,7 +1,7 @@
 {
     "name": "azure-ts-aks-multicluster",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-aks/package.json b/azure-ts-aks/package.json
index 2e9ef511d..b50ff9e12 100644
--- a/azure-ts-aks/package.json
+++ b/azure-ts-aks/package.json
@@ -1,7 +1,7 @@
 {
     "name": "azure-ts-aks",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-appservice-docker/node-app/Dockerfile b/azure-ts-appservice-docker/node-app/Dockerfile
index b797db724..2754645ec 100644
--- a/azure-ts-appservice-docker/node-app/Dockerfile
+++ b/azure-ts-appservice-docker/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-ts-appservice-docker/node-app/app/package.json b/azure-ts-appservice-docker/node-app/app/package.json
index 469aaddde..4b76369ff 100644
--- a/azure-ts-appservice-docker/node-app/app/package.json
+++ b/azure-ts-appservice-docker/node-app/app/package.json
@@ -4,8 +4,8 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/azure-ts-appservice-docker/package.json b/azure-ts-appservice-docker/package.json
index c9d8addc0..d3f73927a 100644
--- a/azure-ts-appservice-docker/package.json
+++ b/azure-ts-appservice-docker/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-appservice-docker",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-appservice/package.json b/azure-ts-appservice/package.json
index a4f614e77..e7d543d66 100644
--- a/azure-ts-appservice/package.json
+++ b/azure-ts-appservice/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-appservice",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-call-azure-sdk/package.json b/azure-ts-call-azure-sdk/package.json
index ed320c15b..7b0e20960 100644
--- a/azure-ts-call-azure-sdk/package.json
+++ b/azure-ts-call-azure-sdk/package.json
@@ -2,11 +2,11 @@
     "name": "azure-ts-call-azure-sdk",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
-        "@azure/arm-authorization": "^8.3.3",
-        "@azure/ms-rest-js": "^2.4.0",
+        "@azure/arm-authorization": "8.4.1",
+        "@azure/ms-rest-js": "2.7.0",
         "@pulumi/azure-native": "2.76.0",
         "@pulumi/pulumi": "3.142.0"
     }
diff --git a/azure-ts-containerapps/node-app/Dockerfile b/azure-ts-containerapps/node-app/Dockerfile
index 53bbea666..10c2700a4 100644
--- a/azure-ts-containerapps/node-app/Dockerfile
+++ b/azure-ts-containerapps/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/azure-ts-containerapps/node-app/app/package.json b/azure-ts-containerapps/node-app/app/package.json
index e7b044f05..4fadfd79c 100644
--- a/azure-ts-containerapps/node-app/app/package.json
+++ b/azure-ts-containerapps/node-app/app/package.json
@@ -4,8 +4,8 @@
     "description": "",
     "main": "index.js",
     "dependencies": {
-        "express": "^4.14.0",
-        "morgan": "^1.8.2"
+        "express": "4.21.2",
+        "morgan": "1.10.0"
     },
     "devDependencies": {},
     "author": ""
diff --git a/azure-ts-containerapps/package.json b/azure-ts-containerapps/package.json
index 9ec2e7cd3..c200053e7 100644
--- a/azure-ts-containerapps/package.json
+++ b/azure-ts-containerapps/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-containerapps",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-functions-many/package.json b/azure-ts-functions-many/package.json
index cc7e90f63..f5c4b4314 100644
--- a/azure-ts-functions-many/package.json
+++ b/azure-ts-functions-many/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-functions-many",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-functions/package.json b/azure-ts-functions/package.json
index 2a8c038b4..bd54b3b72 100644
--- a/azure-ts-functions/package.json
+++ b/azure-ts-functions/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-functions",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-oidc-provider-pulumi-cloud/package.json b/azure-ts-oidc-provider-pulumi-cloud/package.json
index 1ab51bf77..3a6ec06d7 100644
--- a/azure-ts-oidc-provider-pulumi-cloud/package.json
+++ b/azure-ts-oidc-provider-pulumi-cloud/package.json
@@ -2,13 +2,13 @@
     "name": "azure-ts",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^18",
-        "typescript": "^4.9.5"
+        "@types/node": "18.19.68",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
         "@pulumi/azuread": "6.0.2",
         "@pulumi/pulumi": "3.142.0",
-        "yaml": "^2.3.4"
+        "yaml": "2.6.1"
     }
 }
diff --git a/azure-ts-static-website/package.json b/azure-ts-static-website/package.json
index 7a394ed81..74a506f25 100644
--- a/azure-ts-static-website/package.json
+++ b/azure-ts-static-website/package.json
@@ -1,7 +1,7 @@
 {
     "name": "azure-ts-static-website",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-synapse/package.json b/azure-ts-synapse/package.json
index 761857324..880788712 100644
--- a/azure-ts-synapse/package.json
+++ b/azure-ts-synapse/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-synapse",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-webapp-privateendpoint-vnet-injection/package.json b/azure-ts-webapp-privateendpoint-vnet-injection/package.json
index 300fb64f6..f2bd7645e 100644
--- a/azure-ts-webapp-privateendpoint-vnet-injection/package.json
+++ b/azure-ts-webapp-privateendpoint-vnet-injection/package.json
@@ -1,7 +1,7 @@
 {
   "name": "azure-ts-webapp-privateendpoint-vnet-injection",
   "devDependencies": {
-    "@types/node": "^10.0.0"
+    "@types/node": "10.17.60"
   },
   "dependencies": {
     "@pulumi/azure-native": "2.76.0",
diff --git a/azure-ts-webserver/package.json b/azure-ts-webserver/package.json
index 4665a633d..293d17355 100755
--- a/azure-ts-webserver/package.json
+++ b/azure-ts-webserver/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-webserver",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^14.11.1"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/azure-native": "2.76.0",
diff --git a/azure-yaml-container-apps/node-app/Dockerfile b/azure-yaml-container-apps/node-app/Dockerfile
index 53bbea666..10c2700a4 100644
--- a/azure-yaml-container-apps/node-app/Dockerfile
+++ b/azure-yaml-container-apps/node-app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/classic-azure-fs-aci/app/Dockerfile b/classic-azure-fs-aci/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/classic-azure-fs-aci/app/Dockerfile
+++ b/classic-azure-fs-aci/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/classic-azure-ts-aks-keda/functionapp/Dockerfile b/classic-azure-ts-aks-keda/functionapp/Dockerfile
index bcbd17e56..29e6952ee 100644
--- a/classic-azure-ts-aks-keda/functionapp/Dockerfile
+++ b/classic-azure-ts-aks-keda/functionapp/Dockerfile
@@ -5,7 +5,7 @@ RUN cd /src/dotnet-function-app && \
     mkdir -p /home/site/wwwroot && \
     dotnet publish *.csproj --output /home/site/wwwroot
 
-FROM mcr.microsoft.com/azure-functions/dotnet:2.0
+FROM mcr.microsoft.com/azure-functions/dotnet:2.0@sha256:54f16c02b57d2f5721e9a098dbfa4c826f03af478fbe50b68e46d82d594b95c0
 ENV AzureWebJobsScriptRoot=/home/site/wwwroot \
     AzureFunctionsJobHost__Logging__Console__IsEnabled=true
 
diff --git a/classic-azure-ts-aks-keda/package.json b/classic-azure-ts-aks-keda/package.json
index 6bfb34dfe..f3deb0ab0 100644
--- a/classic-azure-ts-aks-keda/package.json
+++ b/classic-azure-ts-aks-keda/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-aks-keda",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
diff --git a/classic-azure-ts-aks-mean/package.json b/classic-azure-ts-aks-mean/package.json
index 789705a99..2c052fa82 100644
--- a/classic-azure-ts-aks-mean/package.json
+++ b/classic-azure-ts-aks-mean/package.json
@@ -1,14 +1,14 @@
 {
     "name": "exposed-deployment",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
         "@pulumi/azuread": "6.0.2",
         "@pulumi/kubernetes": "4.18.4",
         "@pulumi/pulumi": "3.142.0",
-        "@types/mongoose": "^5.2.11",
-        "mongoose": "^5.2.13"
+        "@types/mongoose": "5.11.97",
+        "mongoose": "5.13.22"
     }
 }
\ No newline at end of file
diff --git a/classic-azure-ts-api-management/package.json b/classic-azure-ts-api-management/package.json
index 2670f309e..803c60689 100644
--- a/classic-azure-ts-api-management/package.json
+++ b/classic-azure-ts-api-management/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-api-management",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
diff --git a/classic-azure-ts-appservice-devops/infra/package.json b/classic-azure-ts-appservice-devops/infra/package.json
index 527c70eea..98dcac175 100644
--- a/classic-azure-ts-appservice-devops/infra/package.json
+++ b/classic-azure-ts-appservice-devops/infra/package.json
@@ -4,7 +4,7 @@
         "build": "tsc"
     },
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/classic-azure-ts-cosmosapp-component/container/Dockerfile b/classic-azure-ts-cosmosapp-component/container/Dockerfile
index b797db724..2754645ec 100644
--- a/classic-azure-ts-cosmosapp-component/container/Dockerfile
+++ b/classic-azure-ts-cosmosapp-component/container/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.9.3-alpine
+FROM node:8.9.3-alpine@sha256:40201c973cf40708f06205b22067f952dd46a29cecb7a74b873ce303ad0d11a5
 RUN mkdir -p /usr/src/app
 COPY ./app/* /usr/src/app/
 WORKDIR /usr/src/app
diff --git a/classic-azure-ts-cosmosapp-component/container/app/package.json b/classic-azure-ts-cosmosapp-component/container/app/package.json
index 98393f65a..ad6b4f8fb 100644
--- a/classic-azure-ts-cosmosapp-component/container/app/package.json
+++ b/classic-azure-ts-cosmosapp-component/container/app/package.json
@@ -4,9 +4,9 @@
   "description": "",
   "main": "index.js",
   "dependencies": {
-    "@azure/cosmos": "^3.1.1",
-    "express": "^4.14.0",
-    "morgan": "^1.8.2"
+    "@azure/cosmos": "3.17.3",
+    "express": "4.21.2",
+    "morgan": "1.10.0"
   },
   "devDependencies": {},
   "author": ""
diff --git a/classic-azure-ts-cosmosapp-component/package.json b/classic-azure-ts-cosmosapp-component/package.json
index 7ebcdde91..48b17c1f0 100644
--- a/classic-azure-ts-cosmosapp-component/package.json
+++ b/classic-azure-ts-cosmosapp-component/package.json
@@ -2,10 +2,10 @@
     "name": "azure-ts-cosmosapp-component",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/mocha": "^5.2.7",
-        "@types/node": "^10.3.3",
-        "mocha": "^7.0.0",
-        "ts-node": "^8.6.2"
+        "@types/mocha": "5.2.7",
+        "@types/node": "10.17.60",
+        "mocha": "7.2.0",
+        "ts-node": "8.10.2"
     },
     "dependencies": {
         "@azure/cosmos": "latest",
diff --git a/classic-azure-ts-cosmosapp-component/policy/package.json b/classic-azure-ts-cosmosapp-component/policy/package.json
index 0660fee8e..9bbb01317 100644
--- a/classic-azure-ts-cosmosapp-component/policy/package.json
+++ b/classic-azure-ts-cosmosapp-component/policy/package.json
@@ -7,6 +7,6 @@
         "@pulumi/pulumi": "3.142.0"
     },
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     }
 }
diff --git a/classic-azure-ts-hdinsight-spark/package.json b/classic-azure-ts-hdinsight-spark/package.json
index eaae1a9c3..1df80e965 100644
--- a/classic-azure-ts-hdinsight-spark/package.json
+++ b/classic-azure-ts-hdinsight-spark/package.json
@@ -2,7 +2,7 @@
     "name": "azure-ts-hdinsight-spark",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
diff --git a/classic-azure-ts-msi-keyvault-rbac/package.json b/classic-azure-ts-msi-keyvault-rbac/package.json
index 31a6ceeec..e0b7e20b6 100644
--- a/classic-azure-ts-msi-keyvault-rbac/package.json
+++ b/classic-azure-ts-msi-keyvault-rbac/package.json
@@ -2,7 +2,7 @@
     "name": "azure-msi-keyvault-rbac",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
diff --git a/classic-azure-ts-serverless-url-shortener-global/package.json b/classic-azure-ts-serverless-url-shortener-global/package.json
index 7f2a81cd3..f728de2c9 100644
--- a/classic-azure-ts-serverless-url-shortener-global/package.json
+++ b/classic-azure-ts-serverless-url-shortener-global/package.json
@@ -2,10 +2,10 @@
     "name": "azure-ts-serverless-url-shortener-global",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
-        "@azure/cosmos": "^3.1.0",
+        "@azure/cosmos": "3.17.3",
         "@pulumi/azure": "6.13.0",
         "@pulumi/pulumi": "3.142.0"
     }
diff --git a/classic-azure-ts-stream-analytics/package.json b/classic-azure-ts-stream-analytics/package.json
index a177a4fb8..ab6875aba 100644
--- a/classic-azure-ts-stream-analytics/package.json
+++ b/classic-azure-ts-stream-analytics/package.json
@@ -2,13 +2,13 @@
     "name": "azure-ts-stream-analytics",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^8.0.0",
-        "@types/utf8": "^2.1.6"
+        "@types/node": "8.10.66",
+        "@types/utf8": "2.1.6"
     },
     "dependencies": {
         "@pulumi/azure": "6.13.0",
         "@pulumi/pulumi": "3.142.0",
-        "crypto": "^1.0.1",
-        "utf8": "^3.0.0"
+        "crypto": "1.0.1",
+        "utf8": "3.0.0"
     }
 }
\ No newline at end of file
diff --git a/crd2pulumi-crontabs/kubernetes-ts-crontabs/package.json b/crd2pulumi-crontabs/kubernetes-ts-crontabs/package.json
index ed6d02e4e..fae680956 100644
--- a/crd2pulumi-crontabs/kubernetes-ts-crontabs/package.json
+++ b/crd2pulumi-crontabs/kubernetes-ts-crontabs/package.json
@@ -1,7 +1,7 @@
 {
     "name": "kubernetes-ts-crontabs",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/docker-cs-multi-container-app/App/Dockerfile b/docker-cs-multi-container-app/App/Dockerfile
index 989d4aeb1..b7c2ca4fa 100644
--- a/docker-cs-multi-container-app/App/Dockerfile
+++ b/docker-cs-multi-container-app/App/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:5.0 as build
+FROM mcr.microsoft.com/dotnet/sdk:5.0@sha256:3ff465d940de3e2c727794d92fd7bb649c498d4abd91bc9213ea7831ebf01f1e as build
 WORKDIR /app
 
 COPY *.csproj .
@@ -7,7 +7,7 @@ RUN dotnet restore
 COPY . .
 RUN dotnet publish -c Debug -o out
 
-FROM mcr.microsoft.com/dotnet/aspnet:5.0
+FROM mcr.microsoft.com/dotnet/aspnet:5.0@sha256:1a7d811242f001673d5d25283b3af03da526de1ee8d3bb5aa295f480b7844d44
 WORKDIR /app
 COPY --from=build /app/out .
 ENTRYPOINT ["dotnet", "App.dll"]
\ No newline at end of file
diff --git a/docker-py-multi-container-app/app/Dockerfile b/docker-py-multi-container-app/app/Dockerfile
index ae65090f0..406ba97c9 100644
--- a/docker-py-multi-container-app/app/Dockerfile
+++ b/docker-py-multi-container-app/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.7-alpine
+FROM python:3.7-alpine@sha256:f3d31c8677d03f0b3c724446077f229a6ce9d3ac430f5c08cd7dff00292048c3
 WORKDIR /app
 ENV FLASK_APP=app.py
 ENV FLASK_RUN_HOST=0.0.0.0
diff --git a/docker-ts-multi-container-app/app/Dockerfile b/docker-ts-multi-container-app/app/Dockerfile
index c807dbbbb..779c1d836 100644
--- a/docker-ts-multi-container-app/app/Dockerfile
+++ b/docker-ts-multi-container-app/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:16-alpine
+FROM node:16-alpine@sha256:a1f9d027912b58a7c75be7716c97cfbc6d3099f3a97ed84aa490be9dee20e787
 WORKDIR /app
 
 COPY package.json .
diff --git a/docker-ts-multi-container-app/app/package.json b/docker-ts-multi-container-app/app/package.json
index bfa2bf52f..6edd459dd 100644
--- a/docker-ts-multi-container-app/app/package.json
+++ b/docker-ts-multi-container-app/app/package.json
@@ -9,7 +9,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "express": "^4.17.1",
-    "redis": "^3.1.2"
+    "express": "4.21.2",
+    "redis": "3.1.2"
   }
 }
diff --git a/docker-ts-multi-container-app/package.json b/docker-ts-multi-container-app/package.json
index d8de7b521..dcd797bb4 100644
--- a/docker-ts-multi-container-app/package.json
+++ b/docker-ts-multi-container-app/package.json
@@ -1,7 +1,7 @@
 {
     "name": "docker-ts-multi-container-app",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/dockerbuildcloud-ts/app/Dockerfile b/dockerbuildcloud-ts/app/Dockerfile
index 4f9d60fb7..0eda789ac 100644
--- a/dockerbuildcloud-ts/app/Dockerfile
+++ b/dockerbuildcloud-ts/app/Dockerfile
@@ -1,2 +1,2 @@
-FROM nginx
+FROM nginx@sha256:fb197595ebe76b9c0c14ab68159fd3c08bd067ec62300583543f0ebda353b5be
 COPY content /usr/share/nginx/html
diff --git a/dockerbuildcloud-ts/package.json b/dockerbuildcloud-ts/package.json
index 5254acc61..ed61bc0d5 100644
--- a/dockerbuildcloud-ts/package.json
+++ b/dockerbuildcloud-ts/package.json
@@ -2,7 +2,7 @@
     "name": "dockerbuildcloud-ts",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^20.12.11"
+        "@types/node": "20.17.10"
     },
     "dependencies": {
         "@pulumi/docker-build": "0.0.8",
diff --git a/equinix-ts-webserver/package.json b/equinix-ts-webserver/package.json
index b590fe491..4a23a0007 100644
--- a/equinix-ts-webserver/package.json
+++ b/equinix-ts-webserver/package.json
@@ -2,7 +2,7 @@
     "name": "equinix-ts-webserver",
     "version": "0.1.0",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/equinix": "^0.2.1",
diff --git a/f5bigip-ts-ltm-pool/f5bigip-ec2-instance/package.json b/f5bigip-ts-ltm-pool/f5bigip-ec2-instance/package.json
index b09e8edf3..d2159e014 100644
--- a/f5bigip-ts-ltm-pool/f5bigip-ec2-instance/package.json
+++ b/f5bigip-ts-ltm-pool/f5bigip-ec2-instance/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^14.0.0"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/f5bigip-ts-ltm-pool/f5bigip-pool/package.json b/f5bigip-ts-ltm-pool/f5bigip-pool/package.json
index c690084e6..ba3f24655 100644
--- a/f5bigip-ts-ltm-pool/f5bigip-pool/package.json
+++ b/f5bigip-ts-ltm-pool/f5bigip-pool/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^14.0.0"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/f5bigip": "3.17.7",
diff --git a/f5bigip-ts-ltm-pool/nginx-ec2-instance/package.json b/f5bigip-ts-ltm-pool/nginx-ec2-instance/package.json
index b09e8edf3..d2159e014 100644
--- a/f5bigip-ts-ltm-pool/nginx-ec2-instance/package.json
+++ b/f5bigip-ts-ltm-pool/nginx-ec2-instance/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^14.0.0"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/gcp-ts-cloudrun/app/Dockerfile b/gcp-ts-cloudrun/app/Dockerfile
index 0d183dddb..526cdfa87 100644
--- a/gcp-ts-cloudrun/app/Dockerfile
+++ b/gcp-ts-cloudrun/app/Dockerfile
@@ -1,5 +1,5 @@
 # Use the official lightweight Ruby image.
-FROM ruby:2.7-slim
+FROM ruby:2.7-slim@sha256:39f68389fd3fe8c04ed896b10cc90ba4553a42e555ae18b37b41ea8c3ce965fd
 
 # Install production dependencies.
 WORKDIR /usr/src/app
diff --git a/gcp-ts-cloudrun/package.json b/gcp-ts-cloudrun/package.json
index fd450d2f7..bca78417c 100644
--- a/gcp-ts-cloudrun/package.json
+++ b/gcp-ts-cloudrun/package.json
@@ -2,8 +2,8 @@
     "name": "gcp-ts-cloudrun",
     "version": "2.0.0",
     "devDependencies": {
-        "@types/express": "^4.16.0",
-        "@types/node": "^12.0.0"
+        "@types/express": "4.17.21",
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/gcp-ts-docker-gcr-cloudrun/cloud-run-deploy/package.json b/gcp-ts-docker-gcr-cloudrun/cloud-run-deploy/package.json
index 01a794bba..8a0e0217e 100644
--- a/gcp-ts-docker-gcr-cloudrun/cloud-run-deploy/package.json
+++ b/gcp-ts-docker-gcr-cloudrun/cloud-run-deploy/package.json
@@ -1,7 +1,7 @@
 {
     "name": "cloud-run-deploy",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/app/Dockerfile b/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/app/Dockerfile
index 0d183dddb..526cdfa87 100644
--- a/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/app/Dockerfile
+++ b/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/app/Dockerfile
@@ -1,5 +1,5 @@
 # Use the official lightweight Ruby image.
-FROM ruby:2.7-slim
+FROM ruby:2.7-slim@sha256:39f68389fd3fe8c04ed896b10cc90ba4553a42e555ae18b37b41ea8c3ce965fd
 
 # Install production dependencies.
 WORKDIR /usr/src/app
diff --git a/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/package.json b/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/package.json
index 096485a19..69d9dca8c 100644
--- a/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/package.json
+++ b/gcp-ts-docker-gcr-cloudrun/docker-build-push-gcr/package.json
@@ -1,7 +1,7 @@
 {
     "name": "gcr-build-image",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/gcp-ts-functions/package.json b/gcp-ts-functions/package.json
index 47edab991..d32332f3c 100644
--- a/gcp-ts-functions/package.json
+++ b/gcp-ts-functions/package.json
@@ -2,8 +2,8 @@
     "name": "gcp-ts-functions",
     "version": "2.0.0",
     "devDependencies": {
-        "@types/express": "^4.16.0",
-        "@types/node": "^12.0.0"
+        "@types/express": "4.17.21",
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/gcp": "8.10.2",
diff --git a/gcp-ts-gke-hello-world/package.json b/gcp-ts-gke-hello-world/package.json
index f0b44e3c7..20da3dd09 100644
--- a/gcp-ts-gke-hello-world/package.json
+++ b/gcp-ts-gke-hello-world/package.json
@@ -4,6 +4,6 @@
         "@pulumi/gcp": "8.10.2",
         "@pulumi/kubernetes": "4.18.4",
         "@pulumi/pulumi": "3.142.0",
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     }
 }
diff --git a/gcp-ts-gke-serviceaccount/package.json b/gcp-ts-gke-serviceaccount/package.json
index c28e7664b..b0d1f7fb6 100644
--- a/gcp-ts-gke-serviceaccount/package.json
+++ b/gcp-ts-gke-serviceaccount/package.json
@@ -1,7 +1,7 @@
 {
     "name": "gke.typescript",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/gcp": "8.10.2",
diff --git a/gcp-ts-gke/package.json b/gcp-ts-gke/package.json
index 21c17fe35..f39162d7c 100644
--- a/gcp-ts-gke/package.json
+++ b/gcp-ts-gke/package.json
@@ -1,7 +1,7 @@
 {
     "name": "gcp-ts-gke",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/gcp": "8.10.2",
diff --git a/gcp-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile b/gcp-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
index c1c3b4d45..85ef2fd85 100644
--- a/gcp-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
+++ b/gcp-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:2.5.1
+FROM ruby:2.5.1@sha256:ac6661b87cf49af14b193024f28ef223b529974bdfab58f5e8d4df37a8bdbc9d
 RUN apt-get update -qq && apt-get install -y build-essential libpq-dev nodejs
 RUN mkdir /myapp
 WORKDIR /myapp
diff --git a/gcp-ts-k8s-ruby-on-rails-postgresql/infra/package.json b/gcp-ts-k8s-ruby-on-rails-postgresql/infra/package.json
index b12420b37..39822264e 100644
--- a/gcp-ts-k8s-ruby-on-rails-postgresql/infra/package.json
+++ b/gcp-ts-k8s-ruby-on-rails-postgresql/infra/package.json
@@ -1,7 +1,7 @@
 {
     "name": "gcp-rails",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/gcp-ts-serverless-raw/typescriptfunc/package.json b/gcp-ts-serverless-raw/typescriptfunc/package.json
index 1991a8779..0b932468e 100644
--- a/gcp-ts-serverless-raw/typescriptfunc/package.json
+++ b/gcp-ts-serverless-raw/typescriptfunc/package.json
@@ -11,6 +11,6 @@
   "author": "",
   "license": "ISC",
   "devDependencies": {
-    "typescript": "^4.9.4"
+    "typescript": "4.9.5"
   }
 }
diff --git a/gcp-ts-slackbot/package.json b/gcp-ts-slackbot/package.json
index 77450a574..a08893ec7 100644
--- a/gcp-ts-slackbot/package.json
+++ b/gcp-ts-slackbot/package.json
@@ -2,17 +2,17 @@
     "name": "gcp-ts-slackbot",
     "version": "1.0.0",
     "dependencies": {
-        "@google-cloud/firestore": "^4.9.9",
-        "@google-cloud/pubsub": "^2.11.0",
+        "@google-cloud/firestore": "4.15.1",
+        "@google-cloud/pubsub": "2.19.4",
         "@pulumi/gcp": "8.10.2",
         "@pulumi/pulumi": "3.142.0",
-        "body-parser": "^1.19.0",
-        "express": "^4.17.1",
-        "qs": "^6.10.1",
-        "superagent": "^5.1.0"
+        "body-parser": "1.20.3",
+        "express": "4.21.2",
+        "qs": "6.13.1",
+        "superagent": "5.3.1"
     },
     "devDependencies": {
-        "@types/qs": "^6.9.6",
-        "@types/superagent": "^4.1.10"
+        "@types/qs": "6.9.17",
+        "@types/superagent": "4.1.24"
     }
 }
diff --git a/google-native-ts-functions/package.json b/google-native-ts-functions/package.json
index 6e71fc849..dc6beb757 100644
--- a/google-native-ts-functions/package.json
+++ b/google-native-ts-functions/package.json
@@ -2,8 +2,8 @@
     "name": "google-cloud-ts-functions",
     "version": "1.0.0",
     "devDependencies": {
-        "@types/node": "^8.0.0",
-        "@types/express": "^4.16.0"
+        "@types/node": "8.10.66",
+        "@types/express": "4.17.21"
     },
     "dependencies": {
         "@pulumi/google-native": "0.32.0",
diff --git a/google-native-ts-k8s-python-postgresql/app/Dockerfile b/google-native-ts-k8s-python-postgresql/app/Dockerfile
index e9327d5ec..187644662 100644
--- a/google-native-ts-k8s-python-postgresql/app/Dockerfile
+++ b/google-native-ts-k8s-python-postgresql/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.10-slim
+FROM python:3.10-slim@sha256:61912260e578182d00b5e163eb4cfb13b35fb8782c98d1df9ed584cec8939097
 RUN mkdir /opt/project
 WORKDIR /opt/project
 COPY ./requirements.txt .
diff --git a/google-native-ts-k8s-python-postgresql/infra/package.json b/google-native-ts-k8s-python-postgresql/infra/package.json
index e776feaa6..745b15413 100644
--- a/google-native-ts-k8s-python-postgresql/infra/package.json
+++ b/google-native-ts-k8s-python-postgresql/infra/package.json
@@ -8,7 +8,7 @@
     "@pulumi/random": "4.16.7"
   },
   "devDependencies": {
-    "@types/node": "^17.0.17"
+    "@types/node": "17.0.45"
   },
   "name": "xpresso-gke-demo"
 }
diff --git a/google-native-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile b/google-native-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
index 3f17cfc01..303ea11cb 100644
--- a/google-native-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
+++ b/google-native-ts-k8s-ruby-on-rails-postgresql/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:2.5
+FROM ruby:2.5@sha256:ecc3e4f5da13d881a415c9692bb52d2b85b090f38f4ad99ae94f932b3598444b
 RUN apt-get update -qq && apt-get install -y build-essential libpq-dev nodejs bundler
 RUN mkdir /myapp
 WORKDIR /myapp
diff --git a/google-native-ts-k8s-ruby-on-rails-postgresql/infra/package.json b/google-native-ts-k8s-ruby-on-rails-postgresql/infra/package.json
index 0766fd4f4..28c769da0 100644
--- a/google-native-ts-k8s-ruby-on-rails-postgresql/infra/package.json
+++ b/google-native-ts-k8s-ruby-on-rails-postgresql/infra/package.json
@@ -1,7 +1,7 @@
 {
     "name": "google-rails",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/docker": "4.5.7",
diff --git a/kubernetes-ts-configmap-rollout/package.json b/kubernetes-ts-configmap-rollout/package.json
index ef4cfaeeb..30a60e6db 100644
--- a/kubernetes-ts-configmap-rollout/package.json
+++ b/kubernetes-ts-configmap-rollout/package.json
@@ -1,7 +1,7 @@
 {
   "name": "configmap-rollout",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-exposed-deployment/package.json b/kubernetes-ts-exposed-deployment/package.json
index 8509968f0..05caf9065 100644
--- a/kubernetes-ts-exposed-deployment/package.json
+++ b/kubernetes-ts-exposed-deployment/package.json
@@ -1,7 +1,7 @@
 {
   "name": "exposed-deployment",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-guestbook/components/package.json b/kubernetes-ts-guestbook/components/package.json
index f44fc78c2..70626effa 100644
--- a/kubernetes-ts-guestbook/components/package.json
+++ b/kubernetes-ts-guestbook/components/package.json
@@ -2,7 +2,7 @@
   "name": "guestbook-easy",
   "version": "0.1.0",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-guestbook/simple/package.json b/kubernetes-ts-guestbook/simple/package.json
index 0295fb089..5bdd0f246 100644
--- a/kubernetes-ts-guestbook/simple/package.json
+++ b/kubernetes-ts-guestbook/simple/package.json
@@ -2,7 +2,7 @@
   "name": "guestbook",
   "version": "0.1.0",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-helm-release-wordpress/package.json b/kubernetes-ts-helm-release-wordpress/package.json
index 35f8398c9..8dc66a3cb 100644
--- a/kubernetes-ts-helm-release-wordpress/package.json
+++ b/kubernetes-ts-helm-release-wordpress/package.json
@@ -1,7 +1,7 @@
 {
   "name": "wordpress",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-helm-wordpress/package.json b/kubernetes-ts-helm-wordpress/package.json
index 35f8398c9..8dc66a3cb 100644
--- a/kubernetes-ts-helm-wordpress/package.json
+++ b/kubernetes-ts-helm-wordpress/package.json
@@ -1,7 +1,7 @@
 {
   "name": "wordpress",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-jenkins/package.json b/kubernetes-ts-jenkins/package.json
index f84f928b0..d876599ec 100644
--- a/kubernetes-ts-jenkins/package.json
+++ b/kubernetes-ts-jenkins/package.json
@@ -1,7 +1,7 @@
 {
   "name": "kubernetes-ts-jenkins",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-multicloud/package.json b/kubernetes-ts-multicloud/package.json
index cc4c33a78..6ac8d289d 100644
--- a/kubernetes-ts-multicloud/package.json
+++ b/kubernetes-ts-multicloud/package.json
@@ -1,8 +1,8 @@
 {
   "name": "kubernetes-ts-multicloud",
   "devDependencies": {
-    "@types/node": "^18.0.0",
-    "typescript": "^4.6.2"
+    "@types/node": "18.19.68",
+    "typescript": "4.9.5"
   },
   "dependencies": {
     "@pulumi/awsx": "2.19.0",
diff --git a/kubernetes-ts-nginx/package.json b/kubernetes-ts-nginx/package.json
index 61f2f5984..b1973988e 100644
--- a/kubernetes-ts-nginx/package.json
+++ b/kubernetes-ts-nginx/package.json
@@ -2,7 +2,7 @@
   "name": "k8s-nginx",
   "version": "0.1.0",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-s3-rollout/package.json b/kubernetes-ts-s3-rollout/package.json
index 79098aa47..3b25d7da2 100644
--- a/kubernetes-ts-s3-rollout/package.json
+++ b/kubernetes-ts-s3-rollout/package.json
@@ -1,13 +1,13 @@
 {
     "name": "exposed-deployment",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/kubernetes": "4.18.4",
         "@pulumi/pulumi": "3.142.0",
-        "@types/mime": "^2.0.0",
-        "mime": "^2.5.2"
+        "@types/mime": "2.0.3",
+        "mime": "2.6.0"
     }
 }
diff --git a/kubernetes-ts-sock-shop/package.json b/kubernetes-ts-sock-shop/package.json
index a68b12003..6500391dc 100644
--- a/kubernetes-ts-sock-shop/package.json
+++ b/kubernetes-ts-sock-shop/package.json
@@ -2,7 +2,7 @@
   "name": "sock-shop",
   "version": "0.1.0",
   "devDependencies": {
-    "@types/node": "^12.0.0"
+    "@types/node": "12.20.55"
   },
   "dependencies": {
     "@pulumi/kubernetes": "4.18.4",
diff --git a/kubernetes-ts-staged-rollout-with-prometheus/package.json b/kubernetes-ts-staged-rollout-with-prometheus/package.json
index 70f0c5802..4df5eb5e5 100644
--- a/kubernetes-ts-staged-rollout-with-prometheus/package.json
+++ b/kubernetes-ts-staged-rollout-with-prometheus/package.json
@@ -1,7 +1,7 @@
 {
     "name": "exposed-deployment",
     "devDependencies": {
-        "@types/node": "^12.0.0"
+        "@types/node": "12.20.55"
     },
     "dependencies": {
         "@pulumi/kubernetes": "4.18.4",
diff --git a/misc/benchmarks/policy-pack/package.json b/misc/benchmarks/policy-pack/package.json
index 15b912e33..9b92237fb 100644
--- a/misc/benchmarks/policy-pack/package.json
+++ b/misc/benchmarks/policy-pack/package.json
@@ -7,6 +7,6 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     }
 }
diff --git a/misc/benchmarks/ts-many-resources/package.json b/misc/benchmarks/ts-many-resources/package.json
index a01545664..1ba44afbb 100644
--- a/misc/benchmarks/ts-many-resources/package.json
+++ b/misc/benchmarks/ts-many-resources/package.json
@@ -1,7 +1,7 @@
 {
     "name": "ts-many-resources",
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0"
diff --git a/multicloud-ts-buckets/package.json b/multicloud-ts-buckets/package.json
index ed4bfa618..46d229e00 100644
--- a/multicloud-ts-buckets/package.json
+++ b/multicloud-ts-buckets/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws-typescript",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
diff --git a/nx-monorepo/components/website-deploy/package.json b/nx-monorepo/components/website-deploy/package.json
index 1e9f4c3c1..fed082cf6 100644
--- a/nx-monorepo/components/website-deploy/package.json
+++ b/nx-monorepo/components/website-deploy/package.json
@@ -5,12 +5,12 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "latest",
-        "mime": "^2.6.0"
+        "mime": "2.6.0"
     },
     "scripts": {
         "build": "tsc"
     },
     "devDependencies": {
-        "@types/mime": "^3.0.4"
+        "@types/mime": "3.0.4"
     }
 }
\ No newline at end of file
diff --git a/nx-monorepo/package.json b/nx-monorepo/package.json
index 9a29d40b0..ba3322503 100644
--- a/nx-monorepo/package.json
+++ b/nx-monorepo/package.json
@@ -6,7 +6,7 @@
   "devDependencies": {
     "@nx/js": "18.0.5",
     "nx": "18.0.5",
-    "typescript": "^5.4.2"
+    "typescript": "5.7.2"
   },
   "workspaces": [
     "components/*",
diff --git a/nx-monorepo/website/package.json b/nx-monorepo/website/package.json
index 476f6bfd9..8d50b576b 100644
--- a/nx-monorepo/website/package.json
+++ b/nx-monorepo/website/package.json
@@ -9,8 +9,8 @@
         "astro": "astro"
     },
     "dependencies": {
-        "astro": "^4.5.2",
-        "@astrojs/check": "^0.5.8"
+        "astro": "4.16.17",
+        "@astrojs/check": "0.5.10"
     },
     "nx": {
         "targets": {
diff --git a/policy-packs/aws-ts-advanced/package.json b/policy-packs/aws-ts-advanced/package.json
index fdc367882..cbe6d7bed 100644
--- a/policy-packs/aws-ts-advanced/package.json
+++ b/policy-packs/aws-ts-advanced/package.json
@@ -6,7 +6,7 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0",
-        "typescript": "^3.8.3"
+        "@types/node": "10.17.60",
+        "typescript": "3.9.10"
     }
 }
diff --git a/policy-packs/aws-ts-finops/package.json b/policy-packs/aws-ts-finops/package.json
index a18ab6afa..ed1cef4b9 100644
--- a/policy-packs/aws-ts-finops/package.json
+++ b/policy-packs/aws-ts-finops/package.json
@@ -8,6 +8,6 @@
     "@pulumi/pulumi": "3.142.0"
   },
   "devDependencies": {
-    "@types/node": "^10.0.0"
+    "@types/node": "10.17.60"
   }
 }
diff --git a/policy-packs/aws-ts/package.json b/policy-packs/aws-ts/package.json
index fdc367882..cbe6d7bed 100644
--- a/policy-packs/aws-ts/package.json
+++ b/policy-packs/aws-ts/package.json
@@ -6,7 +6,7 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0",
-        "typescript": "^3.8.3"
+        "@types/node": "10.17.60",
+        "typescript": "3.9.10"
     }
 }
diff --git a/policy-packs/azure-ts/package.json b/policy-packs/azure-ts/package.json
index 5657f9077..6e2088082 100644
--- a/policy-packs/azure-ts/package.json
+++ b/policy-packs/azure-ts/package.json
@@ -6,7 +6,7 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0",
-        "typescript": "^3.8.3"
+        "@types/node": "10.17.60",
+        "typescript": "3.9.10"
     }
 }
diff --git a/policy-packs/gcp-ts/package.json b/policy-packs/gcp-ts/package.json
index 33550e3b7..a2b50fadc 100644
--- a/policy-packs/gcp-ts/package.json
+++ b/policy-packs/gcp-ts/package.json
@@ -6,7 +6,7 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0",
-        "typescript": "^3.8.3"
+        "@types/node": "10.17.60",
+        "typescript": "3.9.10"
     }
 }
diff --git a/policy-packs/kubernetes-ts/package.json b/policy-packs/kubernetes-ts/package.json
index ec58f421d..62e19778d 100644
--- a/policy-packs/kubernetes-ts/package.json
+++ b/policy-packs/kubernetes-ts/package.json
@@ -6,7 +6,7 @@
         "@pulumi/policy": "1.13.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0",
-        "typescript": "^3.8.3"
+        "@types/node": "10.17.60",
+        "typescript": "3.9.10"
     }
 }
diff --git a/policy-packs/stackvalidation-ts/package.json b/policy-packs/stackvalidation-ts/package.json
index cc924866d..5e15e8f77 100644
--- a/policy-packs/stackvalidation-ts/package.json
+++ b/policy-packs/stackvalidation-ts/package.json
@@ -7,6 +7,6 @@
         "@pulumi/pulumi": "3.142.0"
     },
     "devDependencies": {
-        "@types/node": "^10.0.0"
+        "@types/node": "10.17.60"
     }
 }
diff --git a/redis-cloud-aws-ts/package.json b/redis-cloud-aws-ts/package.json
index 59e364f7e..cfa75e443 100644
--- a/redis-cloud-aws-ts/package.json
+++ b/redis-cloud-aws-ts/package.json
@@ -2,12 +2,12 @@
     "name": "redis-cloud-aws-ts",
     "main": "index.ts",
     "devDependencies": {
-        "@types/node": "^16"
+        "@types/node": "16.18.122"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "@rediscloud/pulumi-rediscloud": "^1.2.6"
+        "@rediscloud/pulumi-rediscloud": "1.3.3"
     }
 }
diff --git a/secrets-provider/aws/package.json b/secrets-provider/aws/package.json
index 612abdf73..e27dc5989 100644
--- a/secrets-provider/aws/package.json
+++ b/secrets-provider/aws/package.json
@@ -1,7 +1,7 @@
 {
     "name": "pulumi-aws-kmstest",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/secrets-provider/azure/package.json b/secrets-provider/azure/package.json
index e49e577b1..4046abca7 100644
--- a/secrets-provider/azure/package.json
+++ b/secrets-provider/azure/package.json
@@ -1,7 +1,7 @@
 {
     "name": "pulumi-azure-keyvault",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/secrets-provider/gcloud/package.json b/secrets-provider/gcloud/package.json
index 91f7e0b01..9837c2cf4 100644
--- a/secrets-provider/gcloud/package.json
+++ b/secrets-provider/gcloud/package.json
@@ -1,7 +1,7 @@
 {
     "name": "pulumi-gcloud-kmstest",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/secrets-provider/vault/package.json b/secrets-provider/vault/package.json
index 612abdf73..e27dc5989 100644
--- a/secrets-provider/vault/package.json
+++ b/secrets-provider/vault/package.json
@@ -1,7 +1,7 @@
 {
     "name": "pulumi-aws-kmstest",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",
diff --git a/stack-readme-ts/package.json b/stack-readme-ts/package.json
index 9e113f93d..4403517c2 100644
--- a/stack-readme-ts/package.json
+++ b/stack-readme-ts/package.json
@@ -1,7 +1,7 @@
 {
     "name": "ts-readme1",
     "devDependencies": {
-        "@types/node": "^14"
+        "@types/node": "14.18.63"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0"
diff --git a/testing-integration/program/package.json b/testing-integration/program/package.json
index 18f0de157..855265644 100644
--- a/testing-integration/program/package.json
+++ b/testing-integration/program/package.json
@@ -8,10 +8,10 @@
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "@types/mime": "^2.0.1",
-        "mime": "^2.2.2"
+        "@types/mime": "2.0.3",
+        "mime": "2.6.0"
     },
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     }
 }
diff --git a/testing-pac-ts/package.json b/testing-pac-ts/package.json
index c6b80f2f5..ffd3b5b7b 100644
--- a/testing-pac-ts/package.json
+++ b/testing-pac-ts/package.json
@@ -6,7 +6,7 @@
         "@pulumi/awsx": "2.19.0",
         "@pulumi/eks": "3.4.0",
         "@pulumi/pulumi": "3.142.0",
-        "@types/node": "^13.1.8",
-        "ts-node": "^8.6.2"
+        "@types/node": "13.13.52",
+        "ts-node": "8.10.2"
     }
 }
diff --git a/testing-unit-ts-mocks-jest/package.json b/testing-unit-ts-mocks-jest/package.json
index 01a98cc33..dadcf31a2 100644
--- a/testing-unit-ts-mocks-jest/package.json
+++ b/testing-unit-ts-mocks-jest/package.json
@@ -1,16 +1,16 @@
 {
     "name": "testing-unit-ts-mocks-jest",
     "devDependencies": {
-        "@types/jest": "^28.1.1",
-        "@types/node": "^18",
-        "ts-jest": "^28.0.5",
-        "typescript": "^4.6.2"
+        "@types/jest": "28.1.8",
+        "@types/node": "18.19.68",
+        "ts-jest": "28.0.8",
+        "typescript": "4.9.5"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/awsx": "2.19.0",
         "@pulumi/pulumi": "3.142.0",
-        "node-fetch": "^2.6.7"
+        "node-fetch": "2.7.0"
     },
     "scripts": {
         "test": "jest"
diff --git a/testing-unit-ts/mocha/package.json b/testing-unit-ts/mocha/package.json
index a92a32f7c..8f1e7cdcd 100644
--- a/testing-unit-ts/mocha/package.json
+++ b/testing-unit-ts/mocha/package.json
@@ -1,15 +1,15 @@
 {
     "name": "test-unit-ts",
     "devDependencies": {
-        "mocha": "^10.4.0",
-        "ts-node": "^10.9.2",
-        "typescript": "^5.4.5"
+        "mocha": "10.8.2",
+        "ts-node": "10.9.2",
+        "typescript": "5.7.2"
     },
     "dependencies": {
         "@pulumi/aws": "6.64.0",
         "@pulumi/pulumi": "3.142.0",
-        "@types/mocha": "^10.0.6",
-        "@types/node": "^13.1.8"
+        "@types/mocha": "10.0.10",
+        "@types/node": "13.13.52"
     },
     "scripts": {
         "test": "mocha -r ts-node/register ec2tests.ts bucket_pair_test.ts"
diff --git a/twilio-ts-component/package.json b/twilio-ts-component/package.json
index 9f0d2c7c0..23837742d 100644
--- a/twilio-ts-component/package.json
+++ b/twilio-ts-component/package.json
@@ -1,7 +1,7 @@
 {
     "name": "twilio-ts-component",
     "devDependencies": {
-        "@types/node": "^8.0.0"
+        "@types/node": "8.10.66"
     },
     "dependencies": {
         "@pulumi/pulumi": "3.142.0",