diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 3f651897..a1fe6d7f 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -108,5 +108,10 @@
       groupName: 'CI dependencies',
       automerge: true,
     },
+    /** Don't upgrade dependency on rebuild */
+    {
+      matchFileNames: ['.github/workflows/rebuild.yaml'],
+      enabled: false,
+    },
   ],
 }
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 7d26b367..8fd3d2bc 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -32,8 +32,12 @@ jobs:
           patterns: docker
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
-      - run: echo "${HOME}/.local/bin" >> ${GITHUB_PATH}
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
       - run: python3 -m pip install --user --requirement=ci/requirements.txt
+      - name: Print environment information
+        run: c2cciutils-env
 
       - uses: actions/cache@v4
         with:
@@ -49,8 +53,6 @@ jobs:
           path: /tmp/pre-commit.patch
           retention-days: 1
         if: failure()
-      - name: Print environment information
-        run: c2cciutils-env
 
       - run: make build
       - run: make acceptance
diff --git a/.github/workflows/rebuild.yaml b/.github/workflows/rebuild.yaml
index c87f05f1..53a752a5 100644
--- a/.github/workflows/rebuild.yaml
+++ b/.github/workflows/rebuild.yaml
@@ -7,7 +7,7 @@ on:
 jobs:
   rebuild:
     name: Rebuild
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-22.04
     timeout-minutes: 60
 
     strategy: