diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml
index c59e0e242..d15dd6a7b 100644
--- a/.github/workflows/pr-test.yml
+++ b/.github/workflows/pr-test.yml
@@ -42,7 +42,7 @@ jobs:
   pr-dotenv-linter:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           submodules: "recursive"
           fetch-depth: 0
diff --git a/renovate.json b/renovate.json
index ce0e09de5..dee312c44 100644
--- a/renovate.json
+++ b/renovate.json
@@ -3,6 +3,12 @@
     "github>dev-hato/renovate-config"
   ],
   "packageRules": [
+    {
+      "matchPackageNames": [
+        "flask"
+      ],
+      "allowedVersions": "<3.0.0"
+    },
     {
       "matchPackageNames": [
         "postgres"