diff --git a/.github/renovate.json b/.github/renovate.json
index 0e88b00bf..e0ebf87a1 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -39,15 +39,6 @@
         "custom.regex"
       ],
       "pinDigests": false
-    },
-    {
-      "matchPackageNames": ["@vercel/ncc"],
-      "postUpgradeTasks": {
-        "commands": [
-          "pnpm install --frozen-lockfile --ignore-scripts",
-          "pnpm run build"
-        ]
-      }
     }
   ],
   "customManagers": [
diff --git a/config.yaml b/config.yaml
index 04ee65fe9..76fa7da17 100644
--- a/config.yaml
+++ b/config.yaml
@@ -1,6 +1,14 @@
 # yaml-language-server: $schema=https://docs.renovatebot.com/renovate-schema.json
 
 allowedPostUpgradeCommands:
+  - "^corepack use"
   - "^pnpm install --frozen-lockfile --ignore-scripts$"
   - "^pnpm run build$"
 onboardingConfigFileName: .renovaterc.json
+
+# HACK
+packageRules:
+  - matchDepTypes: [packageManager]
+    postUpgradeTasks:
+      commands:
+        - "corepack use '{{{depName}}}@{{{newVersion}}}'"