diff --git a/.github/renovate.json b/.github/renovate.json
index aab994ad8187..e50fab7b3359 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -10,6 +10,7 @@
   "postUpdateOptions": [
     "yarnDedupeHighest"
   ],
+  "baseBranches": ["master", "stable-2.462"],
   "packageRules": [
     {
       "matchDatasources": [
@@ -29,6 +30,11 @@
       ],
       "allowedVersions": "/20.[0-9]+.[0-9]+(.[0-9]+)?$/"
     },
+    {
+      "matchBaseBranches": ["/stable-.+/"],
+      "matchPackageNames": ["*"],
+      "enabled": false
+    },
     {
       "description": "Should be upgraded in lockstep in order to keep their corresponding Jetty versions aligned, could be grouped but releases are likely separated by a bit of time",
       "matchManagers": [
@@ -217,5 +223,9 @@
     "**/__tests__/**",
     "**/tests/**",
     "**/__fixtures__/**"
-  ]
+  ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true
+  }
 }
diff --git a/test/pom.xml b/test/pom.xml
index 21a21d59ac4a..816e3f4219a6 100644
--- a/test/pom.xml
+++ b/test/pom.xml
@@ -134,7 +134,7 @@ THE SOFTWARE.
         <!-- Required by plugin-util-api -->
         <groupId>org.jenkins-ci.plugins.workflow</groupId>
         <artifactId>workflow-support</artifactId>
-        <version>920.v59f71ce16f04</version>
+        <version>946.v2a_79d8a_4b_e14</version>
       </dependency>
     </dependencies>
   </dependencyManagement>
diff --git a/war/pom.xml b/war/pom.xml
index 969d799350b9..439f385c0305 100644
--- a/war/pom.xml
+++ b/war/pom.xml
@@ -343,7 +343,7 @@ THE SOFTWARE.
                   <!-- dependency of checks-api and plugin-util-api -->
                   <groupId>org.jenkins-ci.plugins.workflow</groupId>
                   <artifactId>workflow-support</artifactId>
-                  <version>920.v59f71ce16f04</version>
+                  <version>946.v2a_79d8a_4b_e14</version>
                   <type>hpi</type>
                 </artifactItem>