diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 4ce836c2..354e39fe 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -21,9 +21,9 @@ jobs:
     env:
       TRIGGER_DEPLOY: ${{ startsWith(github.ref, 'refs/heads/master') }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           cache: "npm"
           node-version-file: ".nvmrc"
diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
index 400d857a..a6609e4f 100644
--- a/.github/workflows/commitlint.yml
+++ b/.github/workflows/commitlint.yml
@@ -8,5 +8,5 @@ jobs:
   commitlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: wagoid/commitlint-github-action@v5
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: wagoid/commitlint-github-action@5ce82f5d814d4010519d15f0552aec4f17a1e1fe # v5
diff --git a/.github/workflows/daily-help-update.yml b/.github/workflows/daily-help-update.yml
index 933bbe17..9f39ab8b 100644
--- a/.github/workflows/daily-help-update.yml
+++ b/.github/workflows/daily-help-update.yml
@@ -26,8 +26,8 @@ jobs:
       TX_TOKEN: ${{ secrets.TX_TOKEN }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           cache: "npm"
           node-version-file: ".nvmrc"
diff --git a/.github/workflows/daily-tx-pull.yml b/.github/workflows/daily-tx-pull.yml
index 9a94ae2e..11bf35b2 100644
--- a/.github/workflows/daily-tx-pull.yml
+++ b/.github/workflows/daily-tx-pull.yml
@@ -28,8 +28,8 @@ jobs:
       TX_TOKEN: ${{ secrets.TX_TOKEN }}
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           cache: "npm"
           node-version-file: ".nvmrc"
diff --git a/package-lock.json b/package-lock.json
index 5022f2cd..5ffb5bce 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,20 +23,20 @@
       "devDependencies": {
         "@babel/eslint-parser": "7.18.2",
         "@babel/node": "7.23.9",
-        "@babel/plugin-proposal-object-rest-spread": "^7.0.0",
-        "@babel/plugin-syntax-dynamic-import": "^7.0.0",
-        "@babel/plugin-transform-async-to-generator": "^7.1.0",
-        "@babel/preset-env": "^7.9.5",
-        "@babel/preset-react": "^7.0.0",
+        "@babel/plugin-proposal-object-rest-spread": "7.20.7",
+        "@babel/plugin-syntax-dynamic-import": "7.8.3",
+        "@babel/plugin-transform-async-to-generator": "7.23.3",
+        "@babel/preset-env": "7.23.9",
+        "@babel/preset-react": "7.23.3",
         "@commitlint/cli": "18.6.0",
         "@commitlint/config-conventional": "18.6.0",
         "async": "3.2.5",
-        "babel-eslint": "^10.0.1",
+        "babel-eslint": "10.1.0",
         "babel-loader": "8.3.0",
         "eslint": "8.17.0",
         "eslint-config-scratch": "9.0.3",
         "eslint-plugin-import": "2.29.1",
-        "eslint-plugin-react": "^7.5.1",
+        "eslint-plugin-react": "7.33.2",
         "format-message-cli": "6.2.4",
         "format-message-parse": "6.2.4",
         "glob": "7.2.3",
@@ -45,15 +45,15 @@
         "json": "^9.0.6",
         "jsonlint": "1.6.3",
         "lodash.defaultsdeep": "4.6.1",
-        "mkdirp": "^0.5.1",
-        "node-fetch": "^2.6.0",
+        "mkdirp": "0.5.1",
+        "node-fetch": "2.7.0",
         "p-limit": "2.3.0",
         "p-queue": "3.2.0",
-        "rimraf": "^2.6.2",
+        "rimraf": "2.7.1",
         "scratch-semantic-release-config": "1.0.8",
         "semantic-release": "19.0.5",
-        "webpack": "^4.6.0",
-        "webpack-cli": "^3.1.2"
+        "webpack": "4.47.0",
+        "webpack-cli": "3.3.12"
       }
     },
     "node_modules/@ampproject/remapping": {
@@ -11479,7 +11479,7 @@
     "node_modules/mkdirp": {
       "version": "0.5.1",
       "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz",
-      "integrity": "sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=",
+      "integrity": "sha512-SknJC52obPfGQPnjIkXbmA6+5H15E+fR+E4iR2oQ3zzCLbd7/ONua69R/Gw7AgkTLsRG+r5fzksYwWe1AgTyWA==",
       "deprecated": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)",
       "dependencies": {
         "minimist": "0.0.8"
@@ -27612,7 +27612,7 @@
     "mkdirp": {
       "version": "0.5.1",
       "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz",
-      "integrity": "sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=",
+      "integrity": "sha512-SknJC52obPfGQPnjIkXbmA6+5H15E+fR+E4iR2oQ3zzCLbd7/ONua69R/Gw7AgkTLsRG+r5fzksYwWe1AgTyWA==",
       "requires": {
         "minimist": "0.0.8"
       }
diff --git a/package.json b/package.json
index d7085d60..d8d14a27 100644
--- a/package.json
+++ b/package.json
@@ -57,20 +57,20 @@
   "devDependencies": {
     "@babel/eslint-parser": "7.18.2",
     "@babel/node": "7.23.9",
-    "@babel/plugin-proposal-object-rest-spread": "^7.0.0",
-    "@babel/plugin-syntax-dynamic-import": "^7.0.0",
-    "@babel/plugin-transform-async-to-generator": "^7.1.0",
-    "@babel/preset-env": "^7.9.5",
-    "@babel/preset-react": "^7.0.0",
+    "@babel/plugin-proposal-object-rest-spread": "7.20.7",
+    "@babel/plugin-syntax-dynamic-import": "7.8.3",
+    "@babel/plugin-transform-async-to-generator": "7.23.3",
+    "@babel/preset-env": "7.23.9",
+    "@babel/preset-react": "7.23.3",
     "@commitlint/cli": "18.6.0",
     "@commitlint/config-conventional": "18.6.0",
     "async": "3.2.5",
-    "babel-eslint": "^10.0.1",
+    "babel-eslint": "10.1.0",
     "babel-loader": "8.3.0",
     "eslint": "8.17.0",
     "eslint-config-scratch": "9.0.3",
     "eslint-plugin-import": "2.29.1",
-    "eslint-plugin-react": "^7.5.1",
+    "eslint-plugin-react": "7.33.2",
     "format-message-cli": "6.2.4",
     "format-message-parse": "6.2.4",
     "glob": "7.2.3",
@@ -79,15 +79,15 @@
     "json": "^9.0.6",
     "jsonlint": "1.6.3",
     "lodash.defaultsdeep": "4.6.1",
-    "mkdirp": "^0.5.1",
-    "node-fetch": "^2.6.0",
+    "mkdirp": "0.5.1",
+    "node-fetch": "2.7.0",
     "p-limit": "2.3.0",
     "p-queue": "3.2.0",
-    "rimraf": "^2.6.2",
+    "rimraf": "2.7.1",
     "scratch-semantic-release-config": "1.0.8",
     "semantic-release": "19.0.5",
-    "webpack": "^4.6.0",
-    "webpack-cli": "^3.1.2"
+    "webpack": "4.47.0",
+    "webpack-cli": "3.3.12"
   },
   "config": {
     "commitizen": {