diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 2a2a094..d3c2cf6 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -128,7 +128,7 @@ jobs:
           fi
           echo "ok: token carries repo + workflow"
       - name: Run Renovate
-        uses: renovatebot/github-action@v46.3.6
+        uses: renovatebot/github-action@v46.3.7
         with:
           # A PAT (not GITHUB_TOKEN): PRs opened with the default token don't trigger other
           # workflows, so Renovate's bump PRs wouldn't run CI. UPDATE_PR_TOKEN (also used by