diff --git a/.mise/config.toml b/.mise/config.toml
index 492f790..056762c 100644
--- a/.mise/config.toml
+++ b/.mise/config.toml
@@ -8,7 +8,7 @@ oxfmt = "0.62.0"
 # no-downgrade trust policy refuses the whole tree. It reaches us through
 # @yarnpkg/core, which requires ^3.2.2 — the floor, so no renovate version can
 # resolve past it. Drop the exclude once upstream publishes an attested release.
-"npm:renovate" = { version = "44.12.0", trust_policy_excludes = [
+"npm:renovate" = { version = "44.14.3", trust_policy_excludes = [
   "@yarnpkg/libzip",
 ] }
 shellcheck = "0.11.0"
diff --git a/.mise/mise.lock b/.mise/mise.lock
index 2e427e5..547a9d5 100644
--- a/.mise/mise.lock
+++ b/.mise/mise.lock
@@ -61,7 +61,7 @@ checksum = "sha256:7ee659a7768e641bbfd5360940660b8e8fd0052f77488f365562bac522fc1
 url = "https://nodejs.org/dist/v26.7.0/node-v26.7.0-darwin-arm64.tar.gz"
 
 [[tools."npm:renovate"]]
-version = "44.12.0"
+version = "44.14.3"
 backend = "npm:renovate"
 
 [tools."npm:renovate".options]