diff --git a/.github/workflows/build-docker-image.yml b/.github/workflows/build-docker-image.yml
index 4f04cfb67..553684828 100644
--- a/.github/workflows/build-docker-image.yml
+++ b/.github/workflows/build-docker-image.yml
@@ -243,7 +243,7 @@ jobs:
           echo "</code></pre>" >> $GITHUB_STEP_SUMMARY
 
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v4
+        uses: actions/attest@v4
         with:
           subject-name: ${{ env.IMAGE_FULL_NAME }}
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/renovate.json b/renovate.json
index 6dc291fbd..d355e82c5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,8 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
+  "extends": ["config:recommended"],
+  "baseBranchPatterns": ["localApps", "config"],
   "gitIgnoredAuthors": [
     "41898282+github-actions[bot]@users.noreply.github.com",
     "85266337+pooneyy@users.noreply.github.com"
@@ -17,8 +16,14 @@
   "packageRules": [
     {
       "matchUpdateTypes": ["major", "pin", "pinDigest", "digest", "lockFileMaintenance", "rollback", "bump", "replacement"],
+      "matchManagers": ["!github-actions"],
       "addLabels": ["{{ updateType }}"]
     },
+    {
+      "matchBaseBranches": ["localApps"],
+      "matchManagers": ["github-actions"],
+      "enabled": false
+    },
     {
       "matchManagers": [
         "docker-compose"