From 8f4f346e31ea8b5e5ff7c8de884f09eafefe4d3f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 9 Oct 2025 01:36:23 +0000
Subject: [PATCH] chore(deps): pin dependency json [security]

---
 package-lock.json                          | 24 ++++++++++++++++------
 packages/scratch-render/package.json       |  2 +-
 packages/scratch-svg-renderer/package.json |  2 +-
 packages/scratch-vm/package.json           |  2 +-
 4 files changed, 21 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index db398af805..086a0cb782 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -25240,9 +25240,9 @@
       }
     },
     "node_modules/json": {
-      "version": "9.0.6",
-      "resolved": "https://registry.npmjs.org/json/-/json-9.0.6.tgz",
-      "integrity": "sha512-Nx+4WwMM1xadgqjjteOVEyjoIVq7fGH1hAlRDoxoq2tFzYsBYZDIKwYbyxolkTYwxsSOgAZD2ACLkeGjhFW2Jw==",
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/json/-/json-10.0.0.tgz",
+      "integrity": "sha512-iK7tAZtpoghibjdB1ncCWykeBMmke3JThUe+rnkD4qkZaglOIQ70Pw7r5UJ4lyUT+7gnw7ehmmLUHDuhqzQD+g==",
       "dev": true,
       "bin": {
         "json": "lib/json.js"
@@ -42126,7 +42126,7 @@
         "gh-pages": "1.2.0",
         "html-webpack-plugin": "5.6.4",
         "jsdoc": "3.6.11",
-        "json": "9.0.6",
+        "json": "10.0.0",
         "playwright-chromium": "1.55.1",
         "scratch-render-fonts": "1.0.238",
         "scratch-semantic-release-config": "3.0.0",
@@ -42293,7 +42293,7 @@
         "eslint-config-scratch": "9.0.9",
         "eslint-plugin-import": "2.32.0",
         "jsdom": "13.2.0",
-        "json": "9.0.6",
+        "json": "10.0.0",
         "mkdirp": "2.1.6",
         "rimraf": "3.0.2",
         "scratch-render-fonts": "1.0.238",
@@ -42388,7 +42388,7 @@
         "in-publish": "2.0.1",
         "js-md5": "0.7.3",
         "jsdoc": "3.6.11",
-        "json": "^9.0.4",
+        "json": "9.0.6",
         "pngjs": "3.4.0",
         "scratch-blocks": "1.1.224",
         "scratch-l10n": "6.0.60",
@@ -42431,6 +42431,18 @@
         "node": ">= 0.10"
       }
     },
+    "packages/scratch-vm/node_modules/json": {
+      "version": "9.0.6",
+      "resolved": "https://registry.npmjs.org/json/-/json-9.0.6.tgz",
+      "integrity": "sha512-Nx+4WwMM1xadgqjjteOVEyjoIVq7fGH1hAlRDoxoq2tFzYsBYZDIKwYbyxolkTYwxsSOgAZD2ACLkeGjhFW2Jw==",
+      "dev": true,
+      "bin": {
+        "json": "lib/json.js"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "packages/scratch-vm/node_modules/rechoir": {
       "version": "0.7.1",
       "resolved": "https://registry.npmjs.org/rechoir/-/rechoir-0.7.1.tgz",
diff --git a/packages/scratch-render/package.json b/packages/scratch-render/package.json
index c46b5a62e6..24637871a7 100644
--- a/packages/scratch-render/package.json
+++ b/packages/scratch-render/package.json
@@ -70,7 +70,7 @@
     "gh-pages": "1.2.0",
     "html-webpack-plugin": "5.6.4",
     "jsdoc": "3.6.11",
-    "json": "9.0.6",
+    "json": "10.0.0",
     "playwright-chromium": "1.55.1",
     "scratch-render-fonts": "1.0.238",
     "scratch-semantic-release-config": "3.0.0",
diff --git a/packages/scratch-svg-renderer/package.json b/packages/scratch-svg-renderer/package.json
index db8d00eb3b..86ea50e4b8 100644
--- a/packages/scratch-svg-renderer/package.json
+++ b/packages/scratch-svg-renderer/package.json
@@ -55,7 +55,7 @@
     "eslint-config-scratch": "9.0.9",
     "eslint-plugin-import": "2.32.0",
     "jsdom": "13.2.0",
-    "json": "9.0.6",
+    "json": "10.0.0",
     "mkdirp": "2.1.6",
     "rimraf": "3.0.2",
     "scratch-render-fonts": "1.0.238",
diff --git a/packages/scratch-vm/package.json b/packages/scratch-vm/package.json
index 0cf983adf2..ab75154db8 100644
--- a/packages/scratch-vm/package.json
+++ b/packages/scratch-vm/package.json
@@ -87,7 +87,7 @@
     "in-publish": "2.0.1",
     "js-md5": "0.7.3",
     "jsdoc": "3.6.11",
-    "json": "^9.0.4",
+    "json": "9.0.6",
     "pngjs": "3.4.0",
     "scratch-blocks": "1.1.224",
     "scratch-l10n": "6.0.60",