diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 695e9a8bbe..2a61810b05 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -29,6 +29,16 @@
       "matchPackagePrefixes": ["com.linecorp.armeria:"],
       "groupName": "armeria packages"
     },
+    {
+      // prevent update to 2.4-groovy-4.0-SNAPSHOT
+      "matchPackageNames": ["org.spockframework:spock-bom"],
+      "allowedVersions": "!/\\-SNAPSHOT$/"
+    },
+    {
+      // prevent 3.0.1u2 -> 3.0.1
+      "matchPackageNames": ["com.google.code.findbugs:annotations"],
+      "allowedVersions": "!/3\\.0\\.1$/"
+    },
     {
       // OpenTelemetry SDK updates are handled by auto-update-otel-sdk.yml
       "matchPackagePrefixes": ["io.opentelemetry:"],