diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 00e3aae7f..874ac25d5 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -67,6 +67,12 @@
       groupName: "GitHub Actions",
       matchManagers: ["github-actions"],
     },
+    // Forbid codemirror@6.65.7
+    // https://github.com/prettier/prettier/pull/13171#issuecomment-1258427561
+    {
+      matchPackageNames: ["codemirror"],
+      allowedVersions: "!/^6\\.65\\.7$/",
+    },
   ],
   ignoreDeps: [
     // It's a dependency of `remark-parse`, use same version to reduce size
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f6ec660ce..ef9f5b605 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -65,7 +65,7 @@ jobs:
         shell: bash
 
       - name: Validate renovate config
-        run: npx --package renovate -c renovate-config-validator
+        run: npx --package renovate --call renovate-config-validator
 
       - name: Run yarn (/)
         run: |
diff --git a/knip.config.js b/knip.config.js
index e25acb899..1674cb8fa 100644
--- a/knip.config.js
+++ b/knip.config.js
@@ -8,11 +8,7 @@ export default {
         "scripts/build/build-javascript-module.js",
         "scripts/tools/**",
       ],
-      ignoreDependencies: [
-        "eslint-formatter-friendly",
-        "ts-expect",
-        "renovate",
-      ],
+      ignoreDependencies: ["eslint-formatter-friendly", "ts-expect"],
       ignoreBinaries: [
         "test-coverage",
         "renovate-config-validator",