diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 0027974..efae02d 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -28,6 +28,13 @@
       ],
       semanticCommitType: 'build',
     },
+    {
+      description: 'Pin @bfra-me/renovate-action.',
+      matchPackageNames: ['@bfra-me/renovate-action'],
+      matchDepTypes: ['action'],
+      commitMessageTopic: '{{depName}}',
+      rangeStrategy: 'pin',
+    },
     {
       matchFileNames: ['**/*.md'],
       addLabels: ['automerge'],
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 6a779d3..c7e2092 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -70,7 +70,7 @@ jobs:
             ${{ !contains('["issues", "pull_request"]', github.event_name) && github.ref_name == 'main' || contains(github.ref_name, 'renovate/') }}
           dry_run: ${{ github.event_name == 'push' && github.ref_name != 'main' }}
         if: github.event_name != 'push' || steps.filter.outputs.changes == 'true'
-        uses: bfra-me/renovate-action@6698751cecd801c8132b98876b285edd04ae6ac0 # v4.3.3
+        uses: bfra-me/renovate-action@v4
         with:
           branch: ${{ env.dry_run == 'true' && github.ref_name || '' }}
           cache: ${{ env.cache }}