[SECURITY]: Pin all package versions

[brycelelbach]

We need to pin ALL dependencies to specific versions to avoid supply chain attacks and ensure stability. We've had a few incidents where updates in dependencies have broken us.