diff --git a/.vscode/settings.json b/.vscode/settings.json
index 2a2f080a..6c97123f 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -64,5 +64,8 @@
     "yaml.schemas": {
       "ansible": "./ansible/**/*.yaml",
       "kubernetes": "./kubernetes/**/*.yaml"
-    }
+    },
+    "github-actions.workflows.pinned.workflows": [
+      ".github/workflows/renovate.yaml"
+    ]
 }
diff --git a/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml b/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
index 1302932e..3afecb98 100644
--- a/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
+++ b/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
@@ -47,6 +47,6 @@ spec:
   postBuild:
     substitute:
       # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-      TALOS_VERSION: v1.6.7
+      TALOS_VERSION: v1.6.6
       # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-      KUBERNETES_VERSION: v1.29.3
+      KUBERNETES_VERSION: v1.29.2