diff --git a/.github/renovate-tracked-deps.json b/.github/renovate-tracked-deps.json
index d1ca883..212d103 100644
--- a/.github/renovate-tracked-deps.json
+++ b/.github/renovate-tracked-deps.json
@@ -1,4 +1,9 @@
 {
+  ".github/workflows/lint.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
   "README.md": {
     "regex": [
       "grafana/flint"
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 95a5ddb..d554700 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -29,8 +29,23 @@
       matchStrings: ["https://raw\\.githubusercontent\\.com/(?<depName>[^/]+/[^/]+)/(?<currentDigest>[a-f0-9]{40})/.*#\\s*(?<currentValue>v\\S+)"],
       datasourceTemplate: "github-tags",
     },
+    {
+      customType: "regex",
+      description: "Update mise version in GitHub Actions workflows",
+      managerFilePatterns: ["/(^|/)(workflow-templates|\\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\\.ya?ml$/", "/(^|/)action\\.ya?ml$/"],
+      datasourceTemplate: "github-release-attachments",
+      packageNameTemplate: "jdx/mise",
+      depNameTemplate: "mise",
+      matchStrings: ["jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"],
+    },
   ],
   packageRules: [
+    {
+      matchPackageNames: ["jdx/mise"],
+      groupName: "mise",
+      description: "Only update mise once a week",
+      schedule: ["before 4am on Monday"],
+    },
     {
       matchPackageNames: ["ghcr.io/super-linter/super-linter"],
       matchCurrentValue: "/^slim-/",
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 8d02158..c655002 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -22,6 +22,9 @@ jobs:
 
       - name: Setup mise
         uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
 
       - name: Lint
         env:
diff --git a/default.json b/default.json
index aafcd40..046f552 100644
--- a/default.json
+++ b/default.json
@@ -18,6 +18,20 @@
 				"https://raw\\.githubusercontent\\.com/(?<depName>[^/]+/[^/]+)/(?<currentDigest>[a-f0-9]{40})/.*#\\s*(?<currentValue>v\\S+)"
 			],
 			"datasourceTemplate": "github-tags"
+		},
+		{
+			"customType": "regex",
+			"description": "Update mise version in GitHub Actions workflows",
+			"managerFilePatterns": [
+				"/(^|/)(workflow-templates|\\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\\.ya?ml$/",
+				"/(^|/)action\\.ya?ml$/"
+			],
+			"datasourceTemplate": "github-release-attachments",
+			"packageNameTemplate": "jdx/mise",
+			"depNameTemplate": "mise",
+			"matchStrings": [
+				"jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"
+			]
 		}
 	],
 	"packageRules": [
@@ -26,6 +40,12 @@
 			"description": "Only update renovate once a week",
 			"schedule": ["before 6am on Monday"]
 		},
+		{
+			"matchPackageNames": ["jdx/mise"],
+			"groupName": "mise",
+			"description": "Only update mise once a week",
+			"schedule": ["before 4am on Monday"]
+		},
 		{
 			"matchPackageNames": ["ghcr.io/super-linter/super-linter"],
 			"matchCurrentValue": "/^slim-/",