diff --git a/package-lock.json b/package-lock.json
index b313d0a62..59a09d354 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -720,9 +720,9 @@
       "dev": true
     },
     "node_modules/@types/node": {
-      "version": "20.6.5",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.6.5.tgz",
-      "integrity": "sha512-2qGq5LAOTh9izcc0+F+dToFigBWiK1phKPt7rNhOqJSr35y8rlIBjDwGtFSgAI6MGIhjwOVNSQZVdJsZJ2uR1w==",
+      "version": "20.6.4",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.6.4.tgz",
+      "integrity": "sha512-nU6d9MPY0NBUMiE/nXd2IIoC4OLvsLpwAjheoAeuzgvDZA1Cb10QYg+91AF6zQiKWRN5i1m07x6sMe0niBznoQ==",
       "dev": true
     },
     "node_modules/@types/unist": {
diff --git a/renovate.json b/renovate.json
index ce0e09de5..dee312c44 100644
--- a/renovate.json
+++ b/renovate.json
@@ -3,6 +3,12 @@
     "github>dev-hato/renovate-config"
   ],
   "packageRules": [
+    {
+      "matchPackageNames": [
+        "flask"
+      ],
+      "allowedVersions": "<3.0.0"
+    },
     {
       "matchPackageNames": [
         "postgres"