diff --git a/.github/renovate.json5 b/.github/renovate.json5
index f1a8411..61a6c78 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -100,6 +100,16 @@
         '/docker/docker/',
       ],
     },
+    {
+      // Lock docker to v25.0.2 for Ubuntu 23.04.
+      matchFileNames: [
+        'os/ubuntu-23.04/Earthfile',
+      ],
+      matchPackageNames: [
+        'docker/docker',
+      ],
+      allowedVersions: '25.0.2',
+    },
     {
       automerge: true,
       matchPackageNames: [