diff --git a/Dockerfile b/Dockerfile
index 7ee91a5..06172b1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 # - test the build of the project in a musl containerized environment
 # - provide an install to run integration tests
 # -	generate a binary to be published with the package to be used by node-pre-gyp
-FROM alpine:3.20
+FROM alpine:3.20@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc
 
 RUN apk add --update --no-cache \
 		build-base \
diff --git a/docker-compose.test.yml b/docker-compose.test.yml
index a21f2e1..db75401 100644
--- a/docker-compose.test.yml
+++ b/docker-compose.test.yml
@@ -2,7 +2,7 @@ version: '2.3'
 services:
   # This provides the testing systemd interface
   mock-systemd:
-    image: ghcr.io/balena-os/mock-systemd-bus:0.2.3
+    image: ghcr.io/balena-os/mock-systemd-bus:0.2.3@sha256:ead8ff4b1f8533eef7078346ad38e149a8159f7de600f8d8df6ac28889368a62
     privileged: true
     volumes:
       - dbus:/shared/dbus
diff --git a/package.json b/package.json
index 9c30171..d1bd951 100644
--- a/package.json
+++ b/package.json
@@ -38,18 +38,18 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@balena/lint": "^8.0.0",
-    "@types/chai": "^4.3.5",
-    "@types/chai-as-promised": "^7.1.5",
-    "@types/mocha": "^10.0.1",
-    "cargo-cp-artifact": "^0.1",
-    "chai": "^4.3.7",
-    "chai-as-promised": "^7.1.1",
-    "husky": "^8.0.3",
-    "lint-staged": "^13.2.3",
-    "mocha": "^11.0.0",
-    "rimraf": "^5.0.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.1.6"
+    "@types/chai": "4.3.20",
+    "@types/chai-as-promised": "7.1.8",
+    "@types/mocha": "10.0.10",
+    "cargo-cp-artifact": "0.1.9",
+    "chai": "4.5.0",
+    "chai-as-promised": "7.1.2",
+    "husky": "8.0.3",
+    "lint-staged": "13.3.0",
+    "mocha": "11.8.0",
+    "rimraf": "5.0.10",
+    "ts-node": "10.9.2",
+    "typescript": "5.9.3"
   },
   "versionist": {
     "publishedAt": "2026-02-19T23:51:24.422Z"