diff --git a/.github/workflows/validate-renovate.yml b/.github/workflows/validate-renovate.yml
index a90f09f..515cae0 100644
--- a/.github/workflows/validate-renovate.yml
+++ b/.github/workflows/validate-renovate.yml
@@ -5,6 +5,7 @@ on:
 
 env:
   LOG_LEVEL: debug
+  RENOVATE_VERSION: "44.11.4" # renovate: datasource=npm depName=renovate
 
 jobs:
   renovate-config-validator:
@@ -18,4 +19,4 @@ jobs:
         with:
           node-version: lts/*
 
-      - run: npx -p renovate renovate-config-validator renovate.json5
+      - run: npx --yes --ignore-scripts -p "renovate@${RENOVATE_VERSION}" -- renovate-config-validator renovate.json5