diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 28265c0795..b917b48578 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -17,7 +17,7 @@ jobs:
         with:
           version: latest
       - name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - name: Build UI
         run: pnpm --prefix web/client run build
       - name: Upload UI build artifact
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index fe1b5be597..88dd5f26ef 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -4,3 +4,9 @@ packages:
   - vscode/react
   - web/client
   - web/common
+allowBuilds:
+  '@swc/core': true
+  '@tailwindcss/oxide': true
+  '@vscode/vsce-sign': true
+  esbuild: true
+  keytar: true