diff --git a/crates/ditto-ast/Cargo.toml b/crates/ditto-ast/Cargo.toml
index 3e1f82e0c..2864c28fb 100644
--- a/crates/ditto-ast/Cargo.toml
+++ b/crates/ditto-ast/Cargo.toml
@@ -9,8 +9,8 @@ doctest = false
 
 [dependencies]
 ditto-cst = { path = "../ditto-cst" }
-serde = { version = "1.0", features = ["derive"] }
-petgraph = "0.6"
-non-empty-vec = { version = "0.2", features = ["serde"] }
-indexmap = { version = "1.9", features = ["serde"] }
+serde = { version = "=1.0.190", features = ["derive"] }
+petgraph = "=0.6.4"
+non-empty-vec = { version = "=0.2.3", features = ["serde"] }
+indexmap = { version = "=1.9.3", features = ["serde"] }
 #unindent = "xx"  <-- might come in useful for smart multi-line strings (like Nix)
diff --git a/crates/ditto-checker/Cargo.toml b/crates/ditto-checker/Cargo.toml
index fc985a779..d92c22d54 100644
--- a/crates/ditto-checker/Cargo.toml
+++ b/crates/ditto-checker/Cargo.toml
@@ -10,20 +10,20 @@ doctest = false
 [dependencies]
 ditto-cst = { path = "../ditto-cst" }
 ditto-ast = { path = "../ditto-ast" }
-non-empty-vec = "0.2"
-lazy_static = "1.4"
-serde = { version = "1.0", features = ["derive"] }
-miette = { version = "5.5", features = ["fancy"] }
-thiserror = "1.0"
-simsearch = "0.2"
-indexmap = "1.9"
-serde_json = "1.0"
+non-empty-vec = "=0.2.3"
+lazy_static = "=1.4.0"
+serde = { version = "=1.0.190", features = ["derive"] }
+miette = { version = "=5.5.0", features = ["fancy"] }
+thiserror = "=1.0.50"
+simsearch = "=0.2.4"
+indexmap = "=1.9.3"
+serde_json = "=1.0.108"
 
 [dev-dependencies]
-similar-asserts = "1.4"
-serde_json = "1.0"
-trycmd = "0.14"
-datatest-stable = "0.1"
+similar-asserts = "=1.4.2"
+serde_json = "=1.0.108"
+trycmd = "=0.14.19"
+datatest-stable = "=0.1.3"
 
 [[test]]
 name = "golden_warning_tests"
diff --git a/crates/ditto-cli/Cargo.toml b/crates/ditto-cli/Cargo.toml
index 12c2109af..6f8df2630 100644
--- a/crates/ditto-cli/Cargo.toml
+++ b/crates/ditto-cli/Cargo.toml
@@ -15,48 +15,48 @@ ditto-ast = { path = "../ditto-ast" }
 ditto-cst = { path = "../ditto-cst" }
 ditto-config = { path = "../ditto-config" }
 ditto-fmt = { path = "../ditto-fmt" }
-clap = "4.0"
-time = { version = "0.3", features = ["serde-human-readable"] }
-miette = { version = "5.5", features = ["fancy"] }
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["json"] }
-tracing-appender = "0.2"
-tracing-flame = "0.2"
-toml = "0.5"
+clap = "=4.0.32"
+time = { version = "=0.3.30", features = ["serde-human-readable"] }
+miette = { version = "=5.5.0", features = ["fancy"] }
+tracing = "=0.1.40"
+tracing-subscriber = { version = "=0.3.17", features = ["json"] }
+tracing-appender = "=0.2.2"
+tracing-flame = "=0.2.0"
+toml = "=0.5.11"
 # https://github.com/notify-rs/notify/issues/249
-notify = "5.0.0"
-clearscreen = "2.0"
-symlink = "0.1.0"
-tokio = { version = "1.25", features = ["full"] }
-dirs = "4.0"
-tempfile = "3.3"
-convert_case = "0.6"
-reqwest = { version = "0.11", features = ["stream"] }
-zip = { version = "0.6", default-features = false, features = [
+notify = "=5.0.0"
+clearscreen = "=2.0.1"
+symlink = "=0.1.0"
+tokio = { version = "=1.25.2", features = ["full"] }
+dirs = "=4.0.0"
+tempfile = "=3.3.0"
+convert_case = "=0.6.0"
+reqwest = { version = "=0.11.22", features = ["stream"] }
+zip = { version = "=0.6.6", default-features = false, features = [
   # don't want the `time` feature
   "deflate",
 ] }
-indicatif = "0.17"
-futures-util = "0.3"
-console = "0.15"
-serde = "1.0"
-serde_json = "1.0"
-pathdiff = "0.2"
-fs2 = "0.4"
-atty = "0.2"
-semver = "1.0"
-shlex = "1.1"
-crossbeam-channel = "0.5"
-sha256 = "1.1"
-async-recursion = "1.0"
+indicatif = "=0.17.7"
+futures-util = "=0.3.29"
+console = "=0.15.7"
+serde = "=1.0.190"
+serde_json = "=1.0.108"
+pathdiff = "=0.2.1"
+fs2 = "=0.4.3"
+atty = "=0.2.14"
+semver = "=1.0.20"
+shlex = "=1.1.0"
+crossbeam-channel = "=0.5.8"
+sha256 = "=1.1.5"
+async-recursion = "=1.0.5"
 
 [dev-dependencies]
-assert_cmd = "2.0"
-trycmd = "0.14"
-walkdir = "2.3"
-predicates = "2.1"
-assert_fs = "1.0"
-similar-asserts = "1.4"
+assert_cmd = "=2.0.12"
+trycmd = "=0.14.19"
+walkdir = "=2.3.3"
+predicates = "=2.1.5"
+assert_fs = "=1.0.13"
+similar-asserts = "=1.4.2"
 
 [build-dependencies]
-time = "0.3"
+time = "=0.3.30"
diff --git a/crates/ditto-codegen-js/Cargo.toml b/crates/ditto-codegen-js/Cargo.toml
index 11bb5236e..d758b6d7e 100644
--- a/crates/ditto-codegen-js/Cargo.toml
+++ b/crates/ditto-codegen-js/Cargo.toml
@@ -9,18 +9,18 @@ doctest = false
 
 [dependencies]
 ditto-ast = { path = "../ditto-ast" }
-lazy_static = "1.4"
-egg = "0.9"
-indexmap = "1.9"
+lazy_static = "=1.4.0"
+egg = "=0.9.5"
+indexmap = "=1.9.3"
 
 [dev-dependencies]
 ditto-checker = { path = "../ditto-checker" }
 ditto-cst = { path = "../ditto-cst" }
-non-empty-vec = { version = "0.2" }
-similar-asserts = "1.4"
-quickcheck = "1.0"
-datatest-stable = "0.1"
-path-slash = "0.2"
+non-empty-vec = { version = "=0.2.3" }
+similar-asserts = "=1.4.2"
+quickcheck = "=1.0.3"
+datatest-stable = "=0.1.3"
+path-slash = "=0.2.1"
 
 [[test]]
 name = "golden_tests"
diff --git a/crates/ditto-config/Cargo.toml b/crates/ditto-config/Cargo.toml
index 0c1f3b4ec..78f2063c2 100644
--- a/crates/ditto-config/Cargo.toml
+++ b/crates/ditto-config/Cargo.toml
@@ -8,19 +8,19 @@ license = "BSD-3-Clause"
 doctest = false
 
 [dependencies]
-toml = "0.5"
-miette = { version = "5.5", features = ["fancy"] }
-thiserror = "1.0"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-semver = { version = "1.0", features = ["serde"] }
-regex = "1.7"
-lazy_static = "1.4"
-validated_newtype = "0.1"
+toml = "=0.5.11"
+miette = { version = "=5.5.0", features = ["fancy"] }
+thiserror = "=1.0.50"
+serde = { version = "=1.0.190", features = ["derive"] }
+serde_json = "=1.0.108"
+semver = { version = "=1.0.20", features = ["serde"] }
+regex = "=1.7.3"
+lazy_static = "=1.4.0"
+validated_newtype = "=0.1.1"
 
 [dev-dependencies]
-similar-asserts = "1.4"
-datatest-stable = "0.1"
+similar-asserts = "=1.4.2"
+datatest-stable = "=0.1.3"
 
 [[test]]
 name = "golden_tests"
diff --git a/crates/ditto-cst/Cargo.toml b/crates/ditto-cst/Cargo.toml
index 66e7dfec8..0fa7ff0a6 100644
--- a/crates/ditto-cst/Cargo.toml
+++ b/crates/ditto-cst/Cargo.toml
@@ -8,23 +8,23 @@ license = "BSD-3-Clause"
 doctest = false
 
 [dependencies]
-itertools = "0.10"
-serde = { version = "1.0", features = ["derive"] }
-miette = { version = "5.5", features = ["fancy"] }
-thiserror = "1.0"
-lalrpop-util = "0.19.8"
-regex = "1"
-logos = "0.12"
+itertools = "=0.10.5"
+serde = { version = "=1.0.190", features = ["derive"] }
+miette = { version = "=5.5.0", features = ["fancy"] }
+thiserror = "=1.0.50"
+lalrpop-util = "=0.19.8"
+regex = "=1.10.2"
+logos = "=0.12.1"
 #simsearch = "xx"   <-- for suggestions
 #unindent = "xx"  <-- might come in useful for smart multi-line strings (like Nix)
 #codespan = "xx" <-- might be a good replacement for our `Span` type
 
 [dev-dependencies]
-similar-asserts = "1.4"
-datatest-stable = "0.1"
+similar-asserts = "=1.4.2"
+datatest-stable = "=0.1.3"
 
 [build-dependencies]
-lalrpop = "0.19.8"
+lalrpop = "=0.19.8"
 
 [[test]]
 name = "golden_tests"
diff --git a/crates/ditto-fmt/Cargo.toml b/crates/ditto-fmt/Cargo.toml
index 6d08ae96c..ac063e7ec 100644
--- a/crates/ditto-fmt/Cargo.toml
+++ b/crates/ditto-fmt/Cargo.toml
@@ -9,12 +9,12 @@ doctest = false
 
 [dependencies]
 ditto-cst = { path = "../ditto-cst" }
-dprint-core = "0.60"
-similar = "2.2"
+dprint-core = "=0.60.0"
+similar = "=2.2.1"
 
 [dev-dependencies]
-similar-asserts = "1.4"
-datatest-stable = "0.1"
+similar-asserts = "=1.4.2"
+datatest-stable = "=0.1.3"
 
 [[test]]
 name = "golden_tests"
diff --git a/crates/ditto-highlight/Cargo.toml b/crates/ditto-highlight/Cargo.toml
index 044424418..5a89a8384 100644
--- a/crates/ditto-highlight/Cargo.toml
+++ b/crates/ditto-highlight/Cargo.toml
@@ -9,11 +9,11 @@ doctest = false
 
 [dependencies]
 ditto-tree-sitter = { path = "../ditto-tree-sitter" }
-ropey = "1.6"
+ropey = "=1.6.1"
 
 [dev-dependencies]
-similar-asserts = "1.4"
-datatest-stable = "0.1"
+similar-asserts = "=1.4.2"
+datatest-stable = "=0.1.3"
 
 [[test]]
 name = "golden_tests"
diff --git a/crates/ditto-lsp/Cargo.toml b/crates/ditto-lsp/Cargo.toml
index 0be12d059..6b39b2803 100644
--- a/crates/ditto-lsp/Cargo.toml
+++ b/crates/ditto-lsp/Cargo.toml
@@ -9,9 +9,9 @@ doctest = false
 
 [dependencies]
 salsa = { package = "salsa-2022", git = "https://github.com/salsa-rs/salsa", rev = "20c7834ff34fd00a41b59bec61f3d5c85ea3abd4" }
-tower-lsp = "0.18"
-ropey = "1.6"
-tokio = { version = "1.25", features = ["full"] }
+tower-lsp = "=0.18.0"
+ropey = "=1.6.1"
+tokio = { version = "=1.25.2", features = ["full"] }
 ditto-cst = { path = "../ditto-cst" }
 ditto-ast = { path = "../ditto-ast" }
 ditto-checker = { path = "../ditto-checker" }
@@ -20,12 +20,12 @@ ditto-make = { path = "../ditto-make" }
 ditto-fmt = { path = "../ditto-fmt" }
 ditto-tree-sitter = { path = "../ditto-tree-sitter" }
 ditto-highlight = { path = "../ditto-highlight" }
-miette = { version = "5.5", features = ["fancy"] }
-serde = "1.0"
-serde_json = "1.0"
-log = { version = "0.4", features = ["std"] }
-lsp-document = "0.6"
-dashmap = "5.4"
+miette = { version = "=5.5.0", features = ["fancy"] }
+serde = "=1.0.190"
+serde_json = "=1.0.108"
+log = { version = "=0.4.20", features = ["std"] }
+lsp-document = "=0.6.0"
+dashmap = "=5.4.0"
 
 [dev-dependencies]
-assert_cmd = "2.0"
+assert_cmd = "=2.0.12"
diff --git a/crates/ditto-make/Cargo.toml b/crates/ditto-make/Cargo.toml
index 47d5c7bc1..732eab69f 100644
--- a/crates/ditto-make/Cargo.toml
+++ b/crates/ditto-make/Cargo.toml
@@ -8,26 +8,26 @@ license = "BSD-3-Clause"
 doctest = false
 
 [dependencies]
-clap = {version = "4.0", features = ["string"] }
-miette = { version = "5.5", features = ["fancy"] }
+clap = {version = "=4.0.32", features = ["string"] }
+miette = { version = "=5.5.0", features = ["fancy"] }
 ditto-cst = { path = "../ditto-cst" }
 ditto-ast = { path = "../ditto-ast" }
 ditto-checker = { path = "../ditto-checker" }
 ditto-codegen-js = { path = "../ditto-codegen-js" }
 ditto-config = { path = "../ditto-config" }
-walkdir = "2.3"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-petgraph = "0.6"
-ciborium = "0.2"
-pathdiff = "0.2"
-path-slash = "0.2"
-semver = { version = "1.0", features = ["serde"] }
-thiserror = "1.0"
-tracing = "0.1"
+walkdir = "=2.3.3"
+serde = { version = "=1.0.190", features = ["derive"] }
+serde_json = "=1.0.108"
+petgraph = "=0.6.4"
+ciborium = "=0.2.1"
+pathdiff = "=0.2.1"
+path-slash = "=0.2.1"
+semver = { version = "=1.0.20", features = ["serde"] }
+thiserror = "=1.0.50"
+tracing = "=0.1.40"
 # camino = "xx"  <-- start using this ASAP, it's made for exactly this purpose (see the "makefile problem")
 # rayon = "xx"   <-- more concurrency?
 
 [dev-dependencies]
-similar-asserts = "1.4"
-trycmd = "0.14"
+similar-asserts = "=1.4.2"
+trycmd = "=0.14.19"
diff --git a/crates/ditto-tree-sitter/Cargo.toml b/crates/ditto-tree-sitter/Cargo.toml
index 3abc06556..742230c1e 100644
--- a/crates/ditto-tree-sitter/Cargo.toml
+++ b/crates/ditto-tree-sitter/Cargo.toml
@@ -8,11 +8,11 @@ license = "BSD-3-Clause"
 doctest = false
 
 [dependencies]
-tree-sitter = "0.20"
+tree-sitter = "=0.20.10"
 tree-sitter-ditto = { git = "https://github.com/ditto-lang/tree-sitter-ditto", rev = "8ef1dd94a722c846cf5f3538bc610cdda8a57a74" }
 
 [dev-dependencies]
-datatest-stable = "0.1"
+datatest-stable = "=0.1.3"
 
 [[test]]
 name = "parsing_tests"