diff --git a/.github/actions/test-package/action.yml b/.github/actions/test-package/action.yml
index dfa27a936c..d5e855638d 100644
--- a/.github/actions/test-package/action.yml
+++ b/.github/actions/test-package/action.yml
@@ -27,7 +27,7 @@ runs:
         npm run test
     - name: Publish test reports
       if: ${{ !cancelled() }}
-      uses: EnricoMi/publish-unit-test-result-action@v2
+      uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2
       with:
         files: "./packages/${{ inputs.package_name }}/test-results/**/*"
         check_name: "Test report for ${{ inputs.package_name }}"
diff --git a/package-lock.json b/package-lock.json
index ffc7a7f363..ec572ed220 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16755,9 +16755,9 @@
       }
     },
     "node_modules/eslint-config-scratch": {
-      "version": "12.0.18",
-      "resolved": "https://registry.npmjs.org/eslint-config-scratch/-/eslint-config-scratch-12.0.18.tgz",
-      "integrity": "sha512-N22p2ttKbMuSlL1Wlxan5W2UzpYXzlY0ckE9jHCnnnX0ltnEAzHQR0U14HLECTwYaAzS2FmfvGDTQpR233HBTw==",
+      "version": "12.0.19",
+      "resolved": "https://registry.npmjs.org/eslint-config-scratch/-/eslint-config-scratch-12.0.19.tgz",
+      "integrity": "sha512-VSx+JbKHCenDcxO7ufbQbUvguHNFgErJOakkQaHCiu2NSowv6cwRFNIQCni8JD0yj35iST3ksLPFxhH+J6rNYw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
@@ -16775,7 +16775,7 @@
         "eslint-plugin-jsdoc": "61.1.7",
         "eslint-plugin-jsx-a11y": "6.10.2",
         "eslint-plugin-react": "7.37.5",
-        "eslint-plugin-react-hooks": "7.0.0",
+        "eslint-plugin-react-hooks": "7.0.1",
         "globals": "16.4.0",
         "prettier": "3.6.2",
         "typescript-eslint": "8.46.2"
@@ -17171,17 +17171,17 @@
       }
     },
     "node_modules/eslint-plugin-react-hooks": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.0.0.tgz",
-      "integrity": "sha512-fNXaOwvKwq2+pXiRpXc825Vd63+KM4DLL40Rtlycb8m7fYpp6efrTp1sa6ZbP/Ap58K2bEKFXRmhURE+CJAQWw==",
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.0.1.tgz",
+      "integrity": "sha512-O0d0m04evaNzEPoSW+59Mezf8Qt0InfgGIBJnpC0h3NH/WjUAR7BIKUfysC6todmtiZ/A0oUVS8Gce0WhBrHsA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@babel/core": "^7.24.4",
         "@babel/parser": "^7.24.4",
         "hermes-parser": "^0.25.1",
-        "zod": "^3.22.4 || ^4.0.0",
-        "zod-validation-error": "^3.0.3 || ^4.0.0"
+        "zod": "^3.25.0 || ^4.0.0",
+        "zod-validation-error": "^3.5.0 || ^4.0.0"
       },
       "engines": {
         "node": ">=18"
@@ -39866,13 +39866,13 @@
       "dependencies": {
         "@mediapipe/face_detection": "0.4.1646425229",
         "@microbit/microbit-universal-hex": "0.2.2",
-        "@radix-ui/react-context-menu": "^2.2.5",
+        "@radix-ui/react-context-menu": "2.2.16",
         "@scratch/scratch-render": "11.6.0",
         "@scratch/scratch-svg-renderer": "11.6.0",
         "@scratch/scratch-vm": "11.6.0",
-        "@tensorflow-models/face-detection": "^1.0.3",
-        "@tensorflow/tfjs": "^4.22.0",
-        "@testing-library/user-event": "^14.6.1",
+        "@tensorflow-models/face-detection": "1.0.3",
+        "@tensorflow/tfjs": "4.22.0",
+        "@testing-library/user-event": "14.6.1",
         "arraybuffer-loader": "1.0.8",
         "autoprefixer": "9.8.8",
         "balance-text": "3.3.1",
@@ -39910,15 +39910,15 @@
         "query-string": "5.1.1",
         "raw-loader": "4.0.2",
         "react-draggable": "3.3.2",
-        "react-ga": "^3.3.1",
+        "react-ga": "3.3.1",
         "react-intl": "6.8.9",
-        "react-modal": "^3.16.3",
+        "react-modal": "3.16.3",
         "react-popover": "0.5.10",
-        "react-redux": "^8.0.0",
+        "react-redux": "8.1.3",
         "react-responsive": "9.0.2",
         "react-style-proptype": "3.2.2",
-        "react-tabs": "^5.2.0",
-        "react-tooltip": "^4.5.1",
+        "react-tabs": "5.2.0",
+        "react-tooltip": "4.5.1",
         "react-virtualized": "9.22.6",
         "react-visibility-sensor": "5.1.1",
         "redux-throttle": "0.1.1",
@@ -39940,26 +39940,26 @@
         "@babel/core": "7.28.5",
         "@babel/preset-env": "7.28.5",
         "@babel/preset-react": "7.28.5",
-        "@testing-library/jest-dom": "^5.16.5",
-        "@testing-library/react": "^14.0.0",
-        "@types/jest": "^25.2.3",
+        "@testing-library/jest-dom": "5.17.0",
+        "@testing-library/react": "14.3.1",
+        "@types/jest": "25.2.3",
         "@types/prop-types": "15.7.15",
         "@types/react-modal": "3.16.3",
         "babel-core": "7.0.0-bridge.0",
         "babel-loader": "9.2.1",
-        "buffer": "^6.0.3",
+        "buffer": "6.0.3",
         "cheerio": "1.1.2",
         "cross-env": "7.0.3",
         "eslint": "9.38.0",
-        "eslint-config-scratch": "^12.0.8",
-        "eslint-import-resolver-webpack": "^0.13.10",
-        "eslint-plugin-import": "^2.32.0",
-        "eslint-plugin-react": "^7.37.5",
+        "eslint-config-scratch": "12.0.19",
+        "eslint-import-resolver-webpack": "0.13.10",
+        "eslint-plugin-import": "2.32.0",
+        "eslint-plugin-react": "7.37.5",
         "file-loader": "6.2.0",
         "gh-pages": "3.2.3",
         "html-webpack-plugin": "5.6.4",
-        "jest": "^29.7.0",
-        "jest-environment-jsdom": "^29.7.0",
+        "jest": "29.7.0",
+        "jest-environment-jsdom": "29.7.0",
         "jest-junit": "7.0.0",
         "mkdirp": "1.0.4",
         "raf": "3.4.1",
@@ -39971,7 +39971,7 @@
         "selenium-webdriver": "3.6.0",
         "semantic-release": "19.0.5",
         "stream-browserify": "3.0.0",
-        "ts-jest": "^29.4.5",
+        "ts-jest": "29.4.5",
         "ts-loader": "9.5.4",
         "url-loader": "4.1.1",
         "web-audio-test-api": "0.5.2",
@@ -40010,9 +40010,9 @@
         "copy-webpack-plugin": "6.4.1",
         "docdash": "0.4.0",
         "eslint": "9.38.0",
-        "eslint-config-scratch": "^12.0.8",
+        "eslint-config-scratch": "12.0.19",
         "gh-pages": "1.2.0",
-        "globals": "^16.4.0",
+        "globals": "16.4.0",
         "html-webpack-plugin": "5.6.4",
         "jsdoc": "3.6.11",
         "playwright-chromium": "1.56.1",
@@ -40177,8 +40177,8 @@
         "babel-loader": "9.2.1",
         "copy-webpack-plugin": "6.4.1",
         "eslint": "9.38.0",
-        "eslint-config-scratch": "^12.0.8",
-        "globals": "^16.4.0",
+        "eslint-config-scratch": "12.0.19",
+        "globals": "16.4.0",
         "jsdom": "13.2.0",
         "mkdirp": "2.1.6",
         "rimraf": "3.0.2",
@@ -40266,11 +40266,11 @@
         "copy-webpack-plugin": "6.4.1",
         "docdash": "1.2.0",
         "eslint": "9.38.0",
-        "eslint-config-scratch": "^12.0.8",
+        "eslint-config-scratch": "12.0.19",
         "expose-loader": "1.0.3",
         "file-loader": "6.2.0",
         "format-message-cli": "6.2.4",
-        "globals": "^16.4.0",
+        "globals": "16.4.0",
         "in-publish": "2.0.1",
         "js-md5": "0.7.3",
         "jsdoc": "3.6.11",
diff --git a/packages/scratch-gui/package.json b/packages/scratch-gui/package.json
index 1ea17b3517..15efedcd01 100644
--- a/packages/scratch-gui/package.json
+++ b/packages/scratch-gui/package.json
@@ -59,13 +59,13 @@
   "dependencies": {
     "@mediapipe/face_detection": "0.4.1646425229",
     "@microbit/microbit-universal-hex": "0.2.2",
-    "@radix-ui/react-context-menu": "^2.2.5",
+    "@radix-ui/react-context-menu": "2.2.16",
     "@scratch/scratch-render": "11.6.0",
     "@scratch/scratch-svg-renderer": "11.6.0",
     "@scratch/scratch-vm": "11.6.0",
-    "@tensorflow-models/face-detection": "^1.0.3",
-    "@tensorflow/tfjs": "^4.22.0",
-    "@testing-library/user-event": "^14.6.1",
+    "@tensorflow-models/face-detection": "1.0.3",
+    "@tensorflow/tfjs": "4.22.0",
+    "@testing-library/user-event": "14.6.1",
     "arraybuffer-loader": "1.0.8",
     "autoprefixer": "9.8.8",
     "balance-text": "3.3.1",
@@ -103,15 +103,15 @@
     "query-string": "5.1.1",
     "raw-loader": "4.0.2",
     "react-draggable": "3.3.2",
-    "react-ga": "^3.3.1",
+    "react-ga": "3.3.1",
     "react-intl": "6.8.9",
-    "react-modal": "^3.16.3",
+    "react-modal": "3.16.3",
     "react-popover": "0.5.10",
-    "react-redux": "^8.0.0",
+    "react-redux": "8.1.3",
     "react-responsive": "9.0.2",
     "react-style-proptype": "3.2.2",
-    "react-tabs": "^5.2.0",
-    "react-tooltip": "^4.5.1",
+    "react-tabs": "5.2.0",
+    "react-tooltip": "4.5.1",
     "react-virtualized": "9.22.6",
     "react-visibility-sensor": "5.1.1",
     "redux-throttle": "0.1.1",
@@ -139,26 +139,26 @@
     "@babel/core": "7.28.5",
     "@babel/preset-env": "7.28.5",
     "@babel/preset-react": "7.28.5",
-    "@testing-library/jest-dom": "^5.16.5",
-    "@testing-library/react": "^14.0.0",
-    "@types/jest": "^25.2.3",
+    "@testing-library/jest-dom": "5.17.0",
+    "@testing-library/react": "14.3.1",
+    "@types/jest": "25.2.3",
     "@types/prop-types": "15.7.15",
     "@types/react-modal": "3.16.3",
     "babel-core": "7.0.0-bridge.0",
     "babel-loader": "9.2.1",
-    "buffer": "^6.0.3",
+    "buffer": "6.0.3",
     "cheerio": "1.1.2",
     "cross-env": "7.0.3",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
-    "eslint-import-resolver-webpack": "^0.13.10",
-    "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-react": "^7.37.5",
+    "eslint-config-scratch": "12.0.19",
+    "eslint-import-resolver-webpack": "0.13.10",
+    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-react": "7.37.5",
     "file-loader": "6.2.0",
     "gh-pages": "3.2.3",
     "html-webpack-plugin": "5.6.4",
-    "jest": "^29.7.0",
-    "jest-environment-jsdom": "^29.7.0",
+    "jest": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
     "jest-junit": "7.0.0",
     "mkdirp": "1.0.4",
     "raf": "3.4.1",
@@ -170,7 +170,7 @@
     "selenium-webdriver": "3.6.0",
     "semantic-release": "19.0.5",
     "stream-browserify": "3.0.0",
-    "ts-jest": "^29.4.5",
+    "ts-jest": "29.4.5",
     "ts-loader": "9.5.4",
     "url-loader": "4.1.1",
     "web-audio-test-api": "0.5.2",
diff --git a/packages/scratch-render/package.json b/packages/scratch-render/package.json
index ab093f47af..b03b67af15 100644
--- a/packages/scratch-render/package.json
+++ b/packages/scratch-render/package.json
@@ -65,9 +65,9 @@
     "copy-webpack-plugin": "6.4.1",
     "docdash": "0.4.0",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
+    "eslint-config-scratch": "12.0.19",
     "gh-pages": "1.2.0",
-    "globals": "^16.4.0",
+    "globals": "16.4.0",
     "html-webpack-plugin": "5.6.4",
     "jsdoc": "3.6.11",
     "playwright-chromium": "1.56.1",
diff --git a/packages/scratch-svg-renderer/package.json b/packages/scratch-svg-renderer/package.json
index 61e8bf39b6..e4a47163bf 100644
--- a/packages/scratch-svg-renderer/package.json
+++ b/packages/scratch-svg-renderer/package.json
@@ -51,8 +51,8 @@
     "babel-loader": "9.2.1",
     "copy-webpack-plugin": "6.4.1",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
-    "globals": "^16.4.0",
+    "eslint-config-scratch": "12.0.19",
+    "globals": "16.4.0",
     "jsdom": "13.2.0",
     "mkdirp": "2.1.6",
     "rimraf": "3.0.2",
diff --git a/packages/scratch-vm/package.json b/packages/scratch-vm/package.json
index 150859ce07..1141bcd6e2 100644
--- a/packages/scratch-vm/package.json
+++ b/packages/scratch-vm/package.json
@@ -82,11 +82,11 @@
     "copy-webpack-plugin": "6.4.1",
     "docdash": "1.2.0",
     "eslint": "9.38.0",
-    "eslint-config-scratch": "^12.0.8",
+    "eslint-config-scratch": "12.0.19",
     "expose-loader": "1.0.3",
     "file-loader": "6.2.0",
     "format-message-cli": "6.2.4",
-    "globals": "^16.4.0",
+    "globals": "16.4.0",
     "in-publish": "2.0.1",
     "js-md5": "0.7.3",
     "jsdoc": "3.6.11",