diff --git a/.github/workflows/npm-random-beacon.yml b/.github/workflows/npm-random-beacon.yml
index 88776fae45..52520c966a 100644
--- a/.github/workflows/npm-random-beacon.yml
+++ b/.github/workflows/npm-random-beacon.yml
@@ -34,10 +34,17 @@ jobs:
           cache-dependency-path: solidity/random-beacon/yarn.lock
 
       - name: Resolve latest contracts
+        # `@threshold-network/solidity-contracts` is pinned to 1.3.0-dev.11
+        # (the version used by the last successful publish, 2.1.0-dev.18)
+        # because the `development` dist-tag was bumped to 1.3.0-dev.16,
+        # which refactored `TokenStaking` and removed `approveApplication`
+        # (called by `deploy/05_approve_random_beacon_in_token_staking.ts`).
+        # Unpin once the deploy scripts and Go ABI bindings are migrated
+        # to the new TokenStaking API.
         run: |
           yarn upgrade --exact \
             @keep-network/sortition-pools \
-            @threshold-network/solidity-contracts
+            @threshold-network/solidity-contracts@1.3.0-dev.11
 
       # Deploy contracts to a local network to generate deployment artifacts that
       # are required by dashboard and client compilation.