diff --git a/.github/renovate.json b/.github/renovate.json
index 70362e54a..7fbe40781 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -174,6 +174,13 @@
       "groupSlug": "go-toolchain",
       "separateMajorMinor": false,
       "separateMinorPatch": false
+    },
+    {
+      "description": "No digest-only updates for builder-stage images; digests are still re-pinned on tag changes",
+      "matchFileNames": ["docker/Dockerfile", "docker/Dockerfile.devel"],
+      "matchPackageNames": ["golang", "registry.access.redhat.com/ubi9/ubi", "debian"],
+      "matchUpdateTypes": ["digest"],
+      "enabled": false
     }
   ]
 }