diff --git a/.gitea/checker/requirements.txt b/.gitea/checker/requirements.txt
index cd09485..59061bf 100644
--- a/.gitea/checker/requirements.txt
+++ b/.gitea/checker/requirements.txt
@@ -1,4 +1,9 @@
-# Python 依赖（纯 Python AST 解析，无需 Java）
-PyYAML>=6.0.1
-requests>=2.31.0
-javalang>=0.13.0
+# Python 依赖（版本锁定，避免 CI pip 冲突）
+PyYAML==6.0.2
+requests==2.32.3
+charset-normalizer==3.4.1
+urllib3==2.2.3
+certifi==2024.8.30
+idna==3.10
+javalang==0.13.0
+six==1.16.0
diff --git a/.gitea/workflows/api-change-check.yml b/.gitea/workflows/api-change-check.yml
index 1d6b856..4927b01 100644
--- a/.gitea/workflows/api-change-check.yml
+++ b/.gitea/workflows/api-change-check.yml
@@ -26,16 +26,20 @@ jobs:
             exit 1
           fi
 
-      - name: 安装 Python 和依赖
+      - name: 安装 Python 依赖
         run: |
-          sudo apt-get update
-          sudo apt-get install -y python3 python3-pip
-          python3 -m pip install --break-system-packages -r .gitea/checker/requirements.txt
+          if ! python3 -m venv .gitea/.venv 2>/dev/null; then
+            sudo apt-get update -qq
+            sudo apt-get install -y python3-venv
+            python3 -m venv .gitea/.venv
+          fi
+          .gitea/.venv/bin/pip install --upgrade pip
+          .gitea/.venv/bin/pip install -r .gitea/checker/requirements.txt
 
       - name: 检测 Controller 接口参数变更
         run: |
           COMMIT_TIME=$(git log -1 --format=%cd --date=format:'%Y-%m-%d %H:%M:%S')
-          python3 .gitea/checker/main.py \
+          .gitea/.venv/bin/python .gitea/checker/main.py \
             --config .gitea/config.yaml \
             --repo-root . \
             "${{ gitea.actor }}" \