diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 23a66c47..6f3300ba 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -36,5 +36,16 @@
         '"(?<depName>otel/weaver):(?<currentValue>[^"]+)"',
       ],
     },
+    {
+      customType: 'regex',
+      datasourceTemplate: 'java-version',
+      managerFilePatterns: [
+        '.github/workflows/**'
+      ],
+      matchStrings: [
+        '(?<currentValue>\\d+) # renovate: datasource=java-version',
+      ],
+      depNameTemplate: 'java',
+    },
   ],
 }
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f506b9f9..0d277629 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,7 +30,8 @@ jobs:
           - 11
           - 17
           - 21
-        # macos-latest drops support for java 8 temurin. Run java 8 on macos-13. Run java 11, 17, 21 on macos-latest.
+          - 23 # renovate: datasource=java-version
+        # macos-latest drops support for java 8 temurin. Run java 8 on macos-13. Run java 11+ on macos-latest.
         exclude:
           - os: macos-latest
             test-java-version: 8
@@ -40,6 +41,8 @@ jobs:
             test-java-version: 17
           - os: macos-13
             test-java-version: 21
+          - os: macos-13
+            test-java-version: 23 # renovate: datasource=java-version
 
     steps:
       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0