diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 8cda0e8..8631594 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -25,13 +25,16 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      # `uses:` steps ignore defaults.run.working-directory, so action-setup runs
+      # at the repo root — which has no package.json (per-app monorepo). Pin the
+      # version explicitly instead of reading packageManager.
       - uses: pnpm/action-setup@v4
+        with:
+          version: 9
 
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-          cache-dependency-path: ${{ matrix.target.dir }}/pnpm-lock.yaml
 
       - name: Install
         run: pnpm install --frozen-lockfile
@@ -47,11 +50,11 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
+        with:
+          version: 9
       - uses: actions/setup-node@v4
         with:
           node-version: 22
-          cache: pnpm
-          cache-dependency-path: services/platform-api/pnpm-lock.yaml
       - name: Install
         run: pnpm install --frozen-lockfile
       - name: Test