diff --git a/package-lock.json b/package-lock.json
index 7857b4ffb..0cf63ac37 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "@aws-crypto/decrypt-node": "^1.0.3",
         "@aws-crypto/raw-rsa-keyring-node": "^1.1.0",
-        "@govuk-pay/pay-js-commons": "^4.0.2",
+        "@govuk-pay/pay-js-commons": "^4.0.3",
         "@govuk-pay/pay-js-metrics": "^1.0.1",
         "@sentry/node": "7.65.0",
         "cert-info": "^1.5.1",
@@ -58,7 +58,7 @@
         "chai-as-promised": "^7.1.1",
         "chai-string": "^1.4.0",
         "cheerio": "^1.0.0-rc.12",
-        "chokidar-cli": "latest",
+        "chokidar-cli": "*",
         "cypress": "^12.17.4",
         "dotenv": "^16.3.1",
         "govuk-country-and-territory-autocomplete": "^1.0.2",
@@ -2125,9 +2125,9 @@
       }
     },
     "node_modules/@govuk-pay/pay-js-commons": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-4.0.2.tgz",
-      "integrity": "sha512-mPqsrxCyWym+Wb7E+PsOOj9leVdF668ke5z+DsdqyVRXqub8XHG3URjCH7Kddq0y6HmgQ22K+2nwOAvW4JcQmQ==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-4.0.3.tgz",
+      "integrity": "sha512-qSLHqyA0jeWLRpJ2W1ZU0S0iYaRJAAfcfgwtkw4/LN7J6AU8e+OrOvNUCE7l0ioDdUwlVdMe47aUAusOJhvyfQ==",
       "dependencies": {
         "lodash": "4.17.21",
         "moment-timezone": "0.5.43",
@@ -18968,9 +18968,9 @@
       }
     },
     "@govuk-pay/pay-js-commons": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-4.0.2.tgz",
-      "integrity": "sha512-mPqsrxCyWym+Wb7E+PsOOj9leVdF668ke5z+DsdqyVRXqub8XHG3URjCH7Kddq0y6HmgQ22K+2nwOAvW4JcQmQ==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-4.0.3.tgz",
+      "integrity": "sha512-qSLHqyA0jeWLRpJ2W1ZU0S0iYaRJAAfcfgwtkw4/LN7J6AU8e+OrOvNUCE7l0ioDdUwlVdMe47aUAusOJhvyfQ==",
       "requires": {
         "lodash": "4.17.21",
         "moment-timezone": "0.5.43",
diff --git a/package.json b/package.json
index 84c764d90..c8bc5e8ab 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
   "dependencies": {
     "@aws-crypto/decrypt-node": "^1.0.3",
     "@aws-crypto/raw-rsa-keyring-node": "^1.1.0",
-    "@govuk-pay/pay-js-commons": "^4.0.2",
+    "@govuk-pay/pay-js-commons": "^4.0.3",
     "@govuk-pay/pay-js-metrics": "^1.0.1",
     "@sentry/node": "7.65.0",
     "cert-info": "^1.5.1",