diff --git a/renovate.json b/renovate.json
index e7854899b..c87af8132 100644
--- a/renovate.json
+++ b/renovate.json
@@ -24,6 +24,11 @@
       "description": "Fetch changelog details for twemoji packages",
       "matchPackageNames": ["@discordapp/twemoji"],
       "changelogUrl": "https://github.com/jdjdecked/twemoji"
+    },
+    {
+      "description": "Hold got on the v11 line. The override only exists to satisfy security scanners for dev tooling (@electron/get via electron-builder, react-devtools), which was built against the non-ESM v11 API. v11.8.5+ already includes the security fix, and v12+ is ESM-only.",
+      "matchPackageNames": ["got"],
+      "allowedVersions": "<12"
     }
   ],
   "customManagers": [