diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8eb506576..414190f54 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,8 +6,8 @@ settings:
 
 overrides:
   react-is: 19.2.6
-  cross-spawn: ^7.0.6
-  got: ^11.8.5
+  cross-spawn: 7.0.6
+  got: 11.8.6
   electron: 42.3.0
 
 importers:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9bc802319..a80074d3f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -8,6 +8,6 @@ overrides:
   # Force patched versions of transitive dev-tooling deps pulled in by
   # react-devtools (old electron/got/cross-spawn) so they don't trip security
   # scanners. None of these ship in the packaged app.
-  cross-spawn: '^7.0.6'
-  got: '^11.8.5'
+  cross-spawn: '7.0.6'
+  got: '11.8.6'
   electron: '$electron'