diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a6983aa..d347117 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,9 +8,10 @@ updates:
     groups:
       dev-dependencies:
         dependency-type: development
-    # @wordpress/env is CI-critical and has broken across minors (11.8.0
-    # regressed `wp-env run` in CI). Only auto-track patches; minor and major
-    # bumps must be vetted by a human against a green gate.
+    # @wordpress/env is CI-critical: pin it exact (package.json) for local/CI
+    # parity and only auto-track patches, so a minor or major bump is vetted by
+    # a human against a green gate rather than rolled in silently with the
+    # dev-dependencies group.
     ignore:
       - dependency-name: '@wordpress/env'
         update-types:
diff --git a/package.json b/package.json
index 3106add..bdac1f7 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
 		"lint:css": "wp-scripts lint-style \"blocks/**/*.{css,scss}\" \"assets/css/**/*.{css,scss}\"",
 		"wp-env": "wp-env",
 		"generate": "node bin/generate.mjs",
-		"generate:check": "node bin/generate.mjs && git diff --exit-code src/Generated blocks/generated",
+		"generate:check": "node bin/generate.mjs && git checkout -- specs/openapi.json && git diff --exit-code src/Generated blocks/generated",
 		"fetch:ui": "node bin/fetch-ui-bundle.mjs",
 		"check:distignore": "node bin/check-distignore.mjs",
 		"check:component-map": "node bin/check-component-map.mjs",