diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 6db27ec1fc5..311334af387 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -82,4 +82,17 @@
       enabled: false
     }
   ],
+  customManagers: [
+    {
+      customType: 'regex',
+      datasourceTemplate: 'java-version',
+      managerFilePatterns: [
+        '.github/workflows/**'
+      ],
+      matchStrings: [
+        '(?<currentValue>\\d+) # renovate: datasource=java-version',
+      ],
+      depNameTemplate: 'java',
+    },
+  ],
 }
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d323bd561e5..92be2ffc446 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -32,14 +32,14 @@ jobs:
           - 11
           - 17
           - 21
-          - 23
+          - 23 # renovate: datasource=java-version
         # Collect coverage on latest LTS
         include:
           - os: ubuntu-latest
             test-java-version: 21
             coverage: true
             jmh-based-tests: true
-        # macos-latest drops support for java 8 temurin. Run java 8 on macos-13. Run java 11, 17, 21 on macos-latest.
+        # macos-latest drops support for java 8 temurin. Run java 8 on macos-13. Run java 11+ on macos-latest.
         exclude:
           - os: macos-latest
             test-java-version: 8
@@ -50,7 +50,7 @@ jobs:
           - os: macos-13
             test-java-version: 21
           - os: macos-13
-            test-java-version: 23
+            test-java-version: 23 # renovate: datasource=java-version
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2