diff --git a/images/base/Dockerfile b/images/base/Dockerfile
index 1460642..da003e4 100644
--- a/images/base/Dockerfile
+++ b/images/base/Dockerfile
@@ -45,12 +45,14 @@ RUN printf '%s\n' \
 RUN mkdir -p /usr/local/bin
 
 # Install go-task from GitHub releases (not packaged in Wolfi).
+# renovate: datasource=github-releases depName=go-task/task
 ARG TASK_VERSION=v3.48.0
 RUN ARCH="$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')" && \
     curl -fsSL "https://github.com/go-task/task/releases/download/${TASK_VERSION}/task_linux_${ARCH}.tar.gz" | \
     tar -xz -C /usr/local/bin task
 
 # Install golangci-lint from GitHub releases (not packaged in Wolfi).
+# renovate: datasource=github-releases depName=golangci/golangci-lint
 ARG GOLANGCI_LINT_VERSION=v2.10.1
 RUN ARCH="$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')" && \
     VER="${GOLANGCI_LINT_VERSION#v}" && \
diff --git a/images/hermes/Dockerfile b/images/hermes/Dockerfile
index 20d8757..8d26ad9 100644
--- a/images/hermes/Dockerfile
+++ b/images/hermes/Dockerfile
@@ -10,6 +10,7 @@ FROM ${BASE_IMAGE}
 
 # Pin to a calendar-versioned Hermes Agent tag. Bump deliberately; releases
 # are roughly weekly. Override with --build-arg HERMES_VERSION=... for dev.
+# renovate: datasource=github-tags depName=NousResearch/hermes-agent
 ARG HERMES_VERSION=v2026.4.16
 
 LABEL org.opencontainers.image.source="https://github.com/NousResearch/hermes-agent" \
diff --git a/renovate.json b/renovate.json
index 5db72dd..0b293f6 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "customManagers:dockerfileVersions"
   ]
 }