diff --git a/.prettierignore b/.prettierignore
index cb2dc79..bc59a54 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,4 +1,5 @@
 # We don't lint the generated files
 src/php-parser/types/node
 src/php-parser/types/types.ts
-pnpm-lock.yaml
\ No newline at end of file
+pnpm-lock.yaml
+composer.lock
\ No newline at end of file
diff --git a/change/@rightcapital-php-parser-acd228f4-6079-46a4-8dec-1e599f4610d5.json b/change/@rightcapital-php-parser-acd228f4-6079-46a4-8dec-1e599f4610d5.json
new file mode 100644
index 0000000..89bea7a
--- /dev/null
+++ b/change/@rightcapital-php-parser-acd228f4-6079-46a4-8dec-1e599f4610d5.json
@@ -0,0 +1,7 @@
+{
+  "type": "patch",
+  "comment": "fix(deps): pin dependencies",
+  "packageName": "@rightcapital/php-parser",
+  "email": "email not defined",
+  "dependentChangeType": "patch"
+}
diff --git a/composer.json b/composer.json
index d3aed7e..e1d1641 100644
--- a/composer.json
+++ b/composer.json
@@ -1,5 +1,5 @@
 {
   "require": {
-    "nikic/php-parser": "^4.17"
+    "nikic/php-parser": "4.17.1"
   }
 }
diff --git a/composer.lock b/composer.lock
index 0910543..510e8ba 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
     "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
     "This file is @generated automatically"
   ],
-  "content-hash": "fab4850e5c39a5b62c41c3287c9d6362",
+  "content-hash": "acfb6bab0ab6a838aa9efbf7c87b4a3b",
   "packages": [
     {
       "name": "nikic/php-parser",
@@ -28,7 +28,9 @@
         "ircmaxell/php-yacc": "^0.0.7",
         "phpunit/phpunit": "^6.5 || ^7.0 || ^8.0 || ^9.0"
       },
-      "bin": ["bin/php-parse"],
+      "bin": [
+        "bin/php-parse"
+      ],
       "type": "library",
       "extra": {
         "branch-alias": {
@@ -41,14 +43,19 @@
         }
       },
       "notification-url": "https://packagist.org/downloads/",
-      "license": ["BSD-3-Clause"],
+      "license": [
+        "BSD-3-Clause"
+      ],
       "authors": [
         {
           "name": "Nikita Popov"
         }
       ],
       "description": "A PHP parser written in PHP",
-      "keywords": ["parser", "php"],
+      "keywords": [
+        "parser",
+        "php"
+      ],
       "support": {
         "issues": "https://github.com/nikic/PHP-Parser/issues",
         "source": "https://github.com/nikic/PHP-Parser/tree/v4.17.1"
@@ -64,5 +71,5 @@
   "prefer-lowest": false,
   "platform": [],
   "platform-dev": [],
-  "plugin-api-version": "2.3.0"
+  "plugin-api-version": "2.6.0"
 }
diff --git a/package.json b/package.json
index b5311f7..188419f 100644
--- a/package.json
+++ b/package.json
@@ -33,11 +33,11 @@
   "author": "RightCapital Ecosystem team <npm-publisher@rightcapital.com>",
   "license": "MIT",
   "dependencies": {
-    "@rightcapital/phpdoc-parser": "^0.3.5",
-    "lodash": "^4.17.21",
-    "mustache": "^4.2.0",
-    "prettier": "^3.0.3",
-    "typescript": "^5.2.2"
+    "@rightcapital/phpdoc-parser": "0.3.5",
+    "lodash": "4.17.21",
+    "mustache": "4.2.0",
+    "prettier": "3.0.3",
+    "typescript": "5.2.2"
   },
   "devDependencies": {
     "@commitlint/cli": "17.7.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ef46877..514f4b2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,19 +6,19 @@ settings:
 
 dependencies:
   '@rightcapital/phpdoc-parser':
-    specifier: ^0.3.5
+    specifier: 0.3.5
     version: 0.3.5
   lodash:
-    specifier: ^4.17.21
+    specifier: 4.17.21
     version: 4.17.21
   mustache:
-    specifier: ^4.2.0
+    specifier: 4.2.0
     version: 4.2.0
   prettier:
-    specifier: ^3.0.3
+    specifier: 3.0.3
     version: 3.0.3
   typescript:
-    specifier: ^5.2.2
+    specifier: 5.2.2
     version: 5.2.2
 
 devDependencies: