diff --git a/automated/build.sh b/automated/build.sh
index 2c8da833..d5508889 100755
--- a/automated/build.sh
+++ b/automated/build.sh
@@ -33,7 +33,13 @@ else
 fi
 WORKDIR=$ROOT/work/$TAG
 
+if [ $SHORTNAME = "lts" ]
+then
 IMAGE=ghcr.io/commercialhaskell/stackage/build:$TAG
+else
+# workaround https://github.com/haskellfoundation/hf-infrastructure/issues/11
+IMAGE=ghcr.io/commercialhaskell/stackage/build@sha256:885c67138c034bbba4b5538faeaefc1eac0260f396fed446c11102f7d902f9cb
+fi
 
 docker pull $IMAGE
 
diff --git a/build-constraints.yaml b/build-constraints.yaml
index 713a824e..cea7724b 100644
--- a/build-constraints.yaml
+++ b/build-constraints.yaml
@@ -3448,15 +3448,18 @@ packages:
         - gi-pango
         - gi-xlib
         - gi-harfbuzz
-        - gi-gtksource < 0
-        - gi-gtksource5
-        - gi-javascriptcore < 0
-        - gi-javascriptcore6
+        - gi-gtksource < 0 # gi-gtksource5
+        - gi-gtksource3
+        - gi-gtksource5 < 0 # blocked by https://github.com/haskellfoundation/hf-infrastructure/issues/11
+        - gi-javascriptcore < 0 # gi-javascriptcore6
+        - gi-javascriptcore4
+        - gi-javascriptcore6 < 0 # blocked by https://github.com/haskellfoundation/hf-infrastructure/issues/11
         - gi-vte
         - gi-webkit2
         - gi-freetype2
-        - gi-soup < 0
-        - gi-soup3
+        - gi-soup < 0 # gi-soup3
+        - gi-soup2
+        - gi-soup3 < 0 # blocked by https://github.com/haskellfoundation/hf-infrastructure/issues/11
 
     "Brandon Simmons <brandon.m.simmons@gmail.com> @jberryman":
         - directory-tree