diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 6ba51bcae..92324fb5b 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -3,6 +3,7 @@
   extends: [
     'config:best-practices',
     'helpers:pinGitHubActionDigestsToSemver',
+    'customManagers:githubActionsVersions',
   ],
   ignorePaths: [], // overwrite default ignore which includes **/test/**
                    // used to update docker image versions used in Java test files
@@ -252,8 +253,9 @@
         '**/build.gradle.kts',
       ],
       matchStrings: [
-        '"https://github.com/(?<depName>[^/]+/[^/]+)/zipball/(?<currentValue>.+?)"',
+        '"(?<currentValue>.+?)" // renovate\\(github-releases\\): (?<depName>[^\\s]+)',
       ],
+      versioningTemplate: 'semver',
     },
     {
       customType: 'regex',
diff --git a/.github/workflows/reusable-misspell-check.yml b/.github/workflows/reusable-misspell-check.yml
index 56df66335..954eea6f0 100644
--- a/.github/workflows/reusable-misspell-check.yml
+++ b/.github/workflows/reusable-misspell-check.yml
@@ -13,8 +13,12 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install misspell
+        env:
+          # renovate: datasource=github-releases depName=golangci/misspell
+          MISSPELL_VERSION: v0.7.0
         run: |
-          curl -sfL https://raw.githubusercontent.com/golangci/misspell/master/install-misspell.sh | sh -s -- -b bin
+          curl -sfL https://raw.githubusercontent.com/golangci/misspell/${MISSPELL_VERSION}/install-misspell.sh \
+            | sh -s -- -b bin ${MISSPELL_VERSION}
 
       - name: Run misspell
         run: bin/misspell -error .
diff --git a/opamp-client/build.gradle.kts b/opamp-client/build.gradle.kts
index 767892572..92f77f782 100644
--- a/opamp-client/build.gradle.kts
+++ b/opamp-client/build.gradle.kts
@@ -2,6 +2,8 @@ import java.io.FileOutputStream
 import java.io.InputStream
 import java.net.URI
 
+val opampSpecVersion = "v0.14.0" // renovate(github-releases): open-telemetry/opamp-spec
+
 plugins {
   id("otel.java-conventions")
   id("otel.publish-conventions")
@@ -28,7 +30,7 @@ val opampProtos = tasks.register<DownloadAndExtractOpampProtos>("opampProtoDownl
   group = "opamp"
   outputProtosDir.set(project.layout.buildDirectory.dir("opamp/protos"))
   downloadedZipFile.set(project.layout.buildDirectory.file("intermediate/opampProtoDownload/release.zip"))
-  zipUrl.set("https://github.com/open-telemetry/opamp-spec/zipball/v0.14.0")
+  zipUrl.set("https://github.com/open-telemetry/opamp-spec/zipball/$opampSpecVersion")
 }
 
 wire {