From 5588bf586504674a09f1a5d6a700c9827d3dfbc5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 7 Apr 2026 19:12:03 +0000
Subject: [PATCH] fix(deps): pin dependencies

---
 .github/workflows/signature-assistant.yml  | 2 +-
 package-lock.json                          | 6 ++++--
 packages/scratch-gui/package.json          | 2 +-
 packages/scratch-render/package.json       | 2 +-
 packages/scratch-svg-renderer/package.json | 2 +-
 5 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/signature-assistant.yml b/.github/workflows/signature-assistant.yml
index 65ae7a65f56..e65a05824bd 100644
--- a/.github/workflows/signature-assistant.yml
+++ b/.github/workflows/signature-assistant.yml
@@ -21,7 +21,7 @@ jobs:
       )
     runs-on: ubuntu-latest
     steps:
-      - uses: scratchfoundation/scratch-agreements/.github/actions/cla-allowlist@main
+      - uses: scratchfoundation/scratch-agreements/.github/actions/cla-allowlist@4b30d865bc2a18817d06e9503d5445ad2b1aacfc # main
         id: cla-allowlist
       - name: CLA Assistant
         uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
diff --git a/package-lock.json b/package-lock.json
index 1fcd62a4fd5..78b27316967 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -31273,6 +31273,8 @@
     },
     "node_modules/scratch-render-fonts": {
       "version": "1.0.252",
+      "resolved": "https://registry.npmjs.org/scratch-render-fonts/-/scratch-render-fonts-1.0.252.tgz",
+      "integrity": "sha512-leYCgtHMIqy36KqjraAiwaPYc9Bjy2L8J+vZ/CEnUE2PVP3z0dDoA4akz42/hk44kpVDzD574Th3SANt+PlLVA==",
       "dependencies": {
         "base64-loader": "^1.0.0"
       }
@@ -38408,7 +38410,7 @@
         "webpack-dev-server": "5.2.3"
       },
       "peerDependencies": {
-        "scratch-render-fonts": "^1.0.0"
+        "scratch-render-fonts": "1.0.252"
       }
     },
     "packages/scratch-render/node_modules/@webpack-cli/configtest": {
@@ -38668,7 +38670,7 @@
         "xmldom": "0.1.31"
       },
       "peerDependencies": {
-        "scratch-render-fonts": "^1.0.0"
+        "scratch-render-fonts": "1.0.252"
       }
     },
     "packages/scratch-svg-renderer/node_modules/@webpack-cli/configtest": {
diff --git a/packages/scratch-gui/package.json b/packages/scratch-gui/package.json
index 84d635b2518..b2cb2ee8226 100644
--- a/packages/scratch-gui/package.json
+++ b/packages/scratch-gui/package.json
@@ -172,7 +172,7 @@
     "react-intl": "6.8.9",
     "react-modal": "3.16.3",
     "react-popover": "0.5.10",
-    "react-redux": "^8.0.0",
+    "react-redux": "8.1.3",
     "react-responsive": "9.0.2",
     "react-style-proptype": "3.2.2",
     "react-tabs": "5.2.0",
diff --git a/packages/scratch-render/package.json b/packages/scratch-render/package.json
index eafbdd12a73..a1bc2d1e278 100644
--- a/packages/scratch-render/package.json
+++ b/packages/scratch-render/package.json
@@ -90,6 +90,6 @@
     "webpack-dev-server": "5.2.3"
   },
   "peerDependencies": {
-    "scratch-render-fonts": "^1.0.0"
+    "scratch-render-fonts": "1.0.252"
   }
 }
diff --git a/packages/scratch-svg-renderer/package.json b/packages/scratch-svg-renderer/package.json
index dd6366bb3d8..bcaa795a353 100644
--- a/packages/scratch-svg-renderer/package.json
+++ b/packages/scratch-svg-renderer/package.json
@@ -80,6 +80,6 @@
     "xmldom": "0.1.31"
   },
   "peerDependencies": {
-    "scratch-render-fonts": "^1.0.0"
+    "scratch-render-fonts": "1.0.252"
   }
 }