diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 340583f1e1..10aa070611 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -137,7 +137,7 @@
       // intentionally using logback 1.3 in dependency management (for Java 8 support)
       "matchFileNames": ["dependencyManagement/build.gradle.kts"],
       "matchPackagePrefixes": ["ch.qos.logback:"],
-      "matchUpdateTypes": ["major", "minor"],
+      "matchUpdateTypes": ["major"],
       "enabled": false
     },
     {
diff --git a/dependencyManagement/build.gradle.kts b/dependencyManagement/build.gradle.kts
index dcfa4d67ce..b573e004ae 100644
--- a/dependencyManagement/build.gradle.kts
+++ b/dependencyManagement/build.gradle.kts
@@ -80,7 +80,7 @@ val CORE_DEPENDENCIES = listOf(
 // this top level to help consistently satisfy large numbers of transitive dependencies.
 val DEPENDENCIES = listOf(
   "io.r2dbc:r2dbc-proxy:1.1.4.RELEASE",
-  "ch.qos.logback:logback-classic:1.3.8", // 1.4+ requires Java 11+
+  "ch.qos.logback:logback-classic:1.3.14", // 1.4+ requires Java 11+
   "com.github.stefanbirkner:system-lambda:1.2.1",
   "com.github.stefanbirkner:system-rules:1.19.0",
   "uk.org.webcompere:system-stubs-jupiter:2.0.3",