diff --git a/@commitlint/travis-cli/package.json b/@commitlint/travis-cli/package.json
index a6002ad80f..61a41dcdd8 100644
--- a/@commitlint/travis-cli/package.json
+++ b/@commitlint/travis-cli/package.json
@@ -61,12 +61,12 @@
     "babel-preset-commitlint": "^5.0.1",
     "babel-register": "6.26.0",
     "cross-env": "5.1.1",
-    "which": "^1.3.0"
+    "which": "1.3.0"
   },
   "dependencies": {
     "@commitlint/cli": "^5.0.1",
-    "@marionebl/sander": "^0.6.1",
-    "execa": "^0.8.0",
-    "find-up": "^2.1.0"
+    "@marionebl/sander": "0.6.1",
+    "execa": "0.8.0",
+    "find-up": "2.1.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 85f8a61079..4e16d2312c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -81,7 +81,7 @@
     split2 "^2.0.0"
     through2 "^2.0.0"
 
-"@marionebl/sander@0.6.1", "@marionebl/sander@^0.6.0", "@marionebl/sander@^0.6.1":
+"@marionebl/sander@0.6.1", "@marionebl/sander@^0.6.0":
   version "0.6.1"
   resolved "https://registry.npmjs.org/@marionebl/sander/-/sander-0.6.1.tgz#1958965874f24bc51be48875feb50d642fc41f7b"
   dependencies:
@@ -2896,6 +2896,12 @@ find-root@1.0.0:
   version "1.0.0"
   resolved "https://registry.npmjs.org/find-root/-/find-root-1.0.0.tgz#962ff211aab25c6520feeeb8d6287f8f6e95807a"
 
+find-up@2.1.0, find-up@^2.0.0, find-up@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz#45d1b7e506c717ddd482775a2b77920a3c0c57a7"
+  dependencies:
+    locate-path "^2.0.0"
+
 find-up@^1.0.0:
   version "1.1.2"
   resolved "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz#6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
@@ -2903,12 +2909,6 @@ find-up@^1.0.0:
     path-exists "^2.0.0"
     pinkie-promise "^2.0.0"
 
-find-up@^2.0.0, find-up@^2.1.0:
-  version "2.1.0"
-  resolved "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz#45d1b7e506c717ddd482775a2b77920a3c0c57a7"
-  dependencies:
-    locate-path "^2.0.0"
-
 findup-sync@0.4.2:
   version "0.4.2"
   resolved "https://registry.npmjs.org/findup-sync/-/findup-sync-0.4.2.tgz#a8117d0f73124f5a4546839579fe52d7129fb5e5"
@@ -6999,7 +6999,7 @@ which-module@^2.0.0:
   version "2.0.0"
   resolved "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz#d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
 
-which@1, which@^1.2.10, which@^1.2.12, which@^1.2.14, which@^1.2.9, which@^1.3.0:
+which@1, which@1.3.0, which@^1.2.10, which@^1.2.12, which@^1.2.14, which@^1.2.9:
   version "1.3.0"
   resolved "https://registry.npmjs.org/which/-/which-1.3.0.tgz#ff04bdfc010ee547d780bec38e1ac1c2777d253a"
   dependencies: