diff --git a/packages/nx-infra-plugin/package.json b/packages/nx-infra-plugin/package.json
index 7f658ce0f993..64f6e9a15fcc 100644
--- a/packages/nx-infra-plugin/package.json
+++ b/packages/nx-infra-plugin/package.json
@@ -35,7 +35,7 @@
     "@types/jest": "29.5.14",
     "@types/normalize-path": "3.0.2",
     "@types/node": "18.19.130",
-    "@types/lodash": "^4.17.0",
+    "@types/lodash": "4.17.13",
     "prettier": "catalog:tools",
     "ts-jest": "29.1.3",
     "typescript": "4.9.5"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bc67b58044c3..d0bcd767e0fe 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2266,7 +2266,7 @@ importers:
         specifier: 29.5.14
         version: 29.5.14
       '@types/lodash':
-        specifier: ^4.17.0
+        specifier: 4.17.13
         version: 4.17.13
       '@types/node':
         specifier: 18.19.130
@@ -15364,6 +15364,7 @@ packages:
     engines: {node: '>=0.6.0', teleport: '>=0.2.0'}
     deprecated: |-
       You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.
+
       (For a CapTP with native promises, see @endo/eventual-send and @endo/captp)
 
   qified@0.5.3: