diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
index 97e0744..16a5a8d 100644
--- a/.github/workflows/pipeline.yaml
+++ b/.github/workflows/pipeline.yaml
@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   pipe:
-    uses: openmfp/gha/.github/workflows/pipeline-node-module.yml@main
+    uses: openmfp/gha/.github/workflows/pipeline-node-module.yml@41c5cde35953415b597e9a3890c9f7013c0d509b # main
     secrets: inherit
     with:
       publishFromDist: true
@@ -30,7 +30,7 @@ jobs:
   publish-ngx:
     if: ${{ (github.head_ref || github.ref) == 'refs/heads/main' }}
     needs: [pipe]
-    uses: openmfp/gha/.github/workflows/job-node-publish.yml@main
+    uses: openmfp/gha/.github/workflows/job-node-publish.yml@41c5cde35953415b597e9a3890c9f7013c0d509b # main
     secrets: inherit
     with:
       version: ${{ needs.pipe.outputs.strictVersion }}
diff --git a/package.json b/package.json
index 087d57b..5b7b592 100644
--- a/package.json
+++ b/package.json
@@ -49,13 +49,13 @@
     "@angular/build": "^21.2.7",
     "@angular/cli": "21.2.7",
     "@angular/compiler-cli": "21.2.12",
-    "@compodoc/compodoc": "^1.2.1",
+    "@compodoc/compodoc": "1.2.1",
     "@openmfp/config-prettier": "0.9.2",
     "@openmfp/eslint-config-typescript": "0.7.11",
-    "@storybook/addon-docs": "^10.3.5",
-    "@storybook/addon-links": "^10.3.5",
-    "@storybook/angular": "^10.3.5",
-    "@types/jsonpath": "^0.2.4",
+    "@storybook/addon-docs": "10.3.6",
+    "@storybook/addon-links": "10.3.6",
+    "@storybook/angular": "10.3.6",
+    "@types/jsonpath": "0.2.4",
     "@types/node": "24.12.4",
     "@vitest/coverage-v8": "4.1.6",
     "concurrently": "9.2.1",
@@ -65,7 +65,7 @@
     "nodemon": "3.1.14",
     "prettier": "3.8.3",
     "rimraf": "6.1.3",
-    "storybook": "^10.3.5",
+    "storybook": "10.3.6",
     "typescript": "5.9.3",
     "typescript-eslint": "^8.33.0",
     "vitest": "4.1.6",