diff --git a/.github/renovate.json b/.github/renovate.json
index 067e5dd5a..bbc5dfc51 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -65,6 +65,19 @@
       "enabled": true,
       "groupName": "go indirect dependencies"
     },
+    {
+      "description": "a Go major bump is an import-path change, so for an indirect dep it can only happen inside the parent module; nothing here can act on it",
+      "matchManagers": [
+        "gomod"
+      ],
+      "matchDepTypes": [
+        "indirect"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "enabled": false
+    },
     {
       "description": "constrained by the deprecated github.com/google/generative-ai-go, whose build breaks against newer go/ai; remove after migrating to google.golang.org/genai",
       "matchManagers": [