diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index daa8916..0facff5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,6 +6,10 @@ on:
       - main
     tags: ['v*']
 
+env:
+  # renovate: datasource=github-releases depName=EmbarkStudios/cargo-about
+  CARGO_ABOUT_VERSION: 0.6.4
+
 jobs:
   build:
     runs-on: ubuntu-24.04
@@ -38,7 +42,7 @@ jobs:
 
       - name: install cargo-about
         run: |
-          cargo install --locked cargo-about
+          cargo install --locked cargo-about --version ${{ env.CARGO_ABOUT_VERSION }}
 
       - name: Build
         run: |
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 57509e6..c629ea4 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -11,6 +11,10 @@ permissions:
   checks: write
   pull-requests: write
 
+env:
+  # renovate: datasource=github-releases depName=EmbarkStudios/cargo-about
+  CARGO_ABOUT_VERSION: 0.6.4
+
 jobs:
   verify-crate:
     runs-on: ubuntu-latest
@@ -35,7 +39,7 @@ jobs:
 
       - name: install cargo-about
         run: |
-          cargo install cargo-about
+          cargo install --locked cargo-about --version ${{ env.CARGO_ABOUT_VERSION }}
 
       - name: reviewdog / clippy
         uses: sksat/action-clippy@v1.1.0
diff --git a/renovate.json b/renovate.json
index b300ae9..7f04667 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,4 +1,14 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>arkedge/renovate-config"]
+  "extends": ["github>arkedge/renovate-config"],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": [".github/workflows/*"],
+      "matchStrings": [
+        "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?_VERSION:\\s(?<currentValue>.*)\\s",
+      ],
+      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
+    }
+  ]
 }