diff --git a/.github/workflows/lint-workflows.yml b/.github/workflows/lint-workflows.yml
index 1ca0d64c09..5cc20173b9 100644
--- a/.github/workflows/lint-workflows.yml
+++ b/.github/workflows/lint-workflows.yml
@@ -26,6 +26,6 @@ jobs:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       # From https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
       - name: Check workflow files
-        uses: docker://rhysd/actionlint:1.7.1
+        uses: docker://rhysd/actionlint:1.7.1@sha256:c6a00dfcb3c7ffb2f22363ded22ce3d789ea4c6a1862b11a2f7716c56c2509af
         with:
           args: -color
diff --git a/packages/ui-templates/package.json b/packages/ui-templates/package.json
index 3e9657ad08..d6977fbb49 100644
--- a/packages/ui-templates/package.json
+++ b/packages/ui-templates/package.json
@@ -21,7 +21,7 @@
     "@unocss/reset": "0.62.3",
     "critters": "0.0.24",
     "html-validate": "8.22.0",
-    "htmlnano": "^2.1.1",
+    "htmlnano": "2.1.1",
     "jiti": "2.0.0-beta.3",
     "knitwork": "1.1.0",
     "pathe": "1.1.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 364dfa33ab..40fdbb16fa 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -627,7 +627,7 @@ importers:
         specifier: 8.22.0
         version: 8.22.0(vitest@1.6.0(@types/node@20.16.5)(happy-dom@15.7.3)(sass@1.78.0)(terser@5.32.0))
       htmlnano:
-        specifier: ^2.1.1
+        specifier: 2.1.1
         version: 2.1.1(cssnano@7.0.6(postcss@8.4.45))(postcss@8.4.45)(relateurl@0.2.7)(svgo@3.3.2)(terser@5.32.0)(typescript@5.6.2)
       jiti:
         specifier: 2.0.0-beta.3