fix(deps): pin dependencies

Author: renovate[bot]

.github/actions/test-package/action.yml

@@ -27,7 +27,7 @@ runs:
         npm run test
     - name: Publish test reports
       if: ${{ !cancelled() }}
-      uses: EnricoMi/publish-unit-test-result-action@v2
+      uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2
       with:
         files: "./packages/${{ inputs.package_name }}/test-results/**/*"
         check_name: "Test report for ${{ inputs.package_name }}"

.github/workflows/ghpages-cleanup.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out GitHub Pages branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           # replace `fetch-depth` with `shallow-since` if and when actions/checkout#619 (or an equivalent) gets merged
           # then remove the "Fetch a bit more history" step below

package-lock.json

@@ -59,13 +59,13 @@
   "dependencies": {
     "@mediapipe/face_detection": "0.4.1646425229",
     "@microbit/microbit-universal-hex": "0.2.2",
-    "@radix-ui/react-context-menu": "^2.2.5",
+    "@radix-ui/react-context-menu": "2.2.16",
     "@scratch/scratch-render": "11.6.0",
     "@scratch/scratch-svg-renderer": "11.6.0",
     "@scratch/scratch-vm": "11.6.0",
-    "@tensorflow-models/face-detection": "^1.0.3",
-    "@tensorflow/tfjs": "^4.22.0",
-    "@testing-library/user-event": "^14.6.1",
+    "@tensorflow-models/face-detection": "1.0.3",
+    "@tensorflow/tfjs": "4.22.0",
+    "@testing-library/user-event": "14.6.1",
     "arraybuffer-loader": "1.0.8",
     "autoprefixer": "9.8.8",
     "balance-text": "3.3.1",
@@ -103,15 +103,15 @@
     "query-string": "5.1.1",
     "raw-loader": "4.0.2",
     "react-draggable": "3.3.2",
-    "react-ga": "^3.3.1",
+    "react-ga": "3.3.1",
     "react-intl": "6.8.9",
-    "react-modal": "^3.16.3",
+    "react-modal": "3.16.3",
     "react-popover": "0.5.10",
-    "react-redux": "^8.0.0",
+    "react-redux": "8.1.3",
     "react-responsive": "9.0.2",
     "react-style-proptype": "3.2.2",
-    "react-tabs": "^5.2.0",
-    "react-tooltip": "^4.5.1",
+    "react-tabs": "5.2.0",
+    "react-tooltip": "4.5.1",
     "react-virtualized": "9.22.6",
     "react-visibility-sensor": "5.1.1",
     "redux-throttle": "0.1.1",
@@ -139,25 +139,25 @@
     "@babel/core": "7.28.4",
     "@babel/preset-env": "7.28.3",
     "@babel/preset-react": "7.27.1",
-    "@testing-library/jest-dom": "^5.16.5",
-    "@testing-library/react": "^14.0.0",
-    "@types/jest": "^25.2.3",
+    "@testing-library/jest-dom": "5.17.0",
+    "@testing-library/react": "14.3.1",
+    "@types/jest": "25.2.3",
     "@types/prop-types": "15.7.15",
     "@types/react-modal": "3.16.3",
     "babel-core": "7.0.0-bridge.0",
     "babel-loader": "9.2.1",
-    "buffer": "^6.0.3",
+    "buffer": "6.0.3",
     "cheerio": "1.1.2",
     "cross-env": "7.0.3",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
-    "eslint-import-resolver-webpack": "^0.13.10",
-    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-react": "^7.37.5",
+    "eslint-config-scratch": "12.0.12",
+    "eslint-import-resolver-webpack": "0.13.10",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-react": "7.37.5",
     "file-loader": "6.2.0",
     "gh-pages": "3.2.3",
     "html-webpack-plugin": "5.6.4",
-    "jest": "^25.5.4",
+    "jest": "25.5.4",
     "jest-junit": "7.0.0",
     "mkdirp": "1.0.4",
     "raf": "3.4.1",
@@ -169,7 +169,7 @@
     "selenium-webdriver": "3.6.0",
     "semantic-release": "19.0.5",
     "stream-browserify": "3.0.0",
-    "ts-jest": "^25.5.1",
+    "ts-jest": "25.5.1",
     "ts-loader": "9.5.4",
     "url-loader": "4.1.1",
     "web-audio-test-api": "0.5.2",

packages/scratch-gui/package.json

@@ -65,9 +65,9 @@
     "copy-webpack-plugin": "6.4.1",
     "docdash": "0.4.0",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
+    "eslint-config-scratch": "12.0.12",
     "gh-pages": "1.2.0",
-    "globals": "^16.4.0",
+    "globals": "16.4.0",
     "html-webpack-plugin": "5.6.4",
     "jsdoc": "3.6.11",
     "json": "9.0.6",

packages/scratch-render/package.json

@@ -51,8 +51,8 @@
     "babel-loader": "9.2.1",
     "copy-webpack-plugin": "6.4.1",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
-    "globals": "^16.4.0",
+    "eslint-config-scratch": "12.0.12",
+    "globals": "16.4.0",
     "jsdom": "13.2.0",
     "json": "9.0.6",
     "mkdirp": "2.1.6",

packages/scratch-svg-renderer/package.json

@@ -79,11 +79,11 @@
     "copy-webpack-plugin": "6.4.1",
     "docdash": "1.2.0",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
+    "eslint-config-scratch": "12.0.12",
     "expose-loader": "1.0.3",
     "file-loader": "6.2.0",
     "format-message-cli": "6.2.4",
-    "globals": "^16.4.0",
+    "globals": "16.4.0",
     "in-publish": "2.0.1",
     "js-md5": "0.7.3",
     "jsdoc": "3.6.11",