diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 97f10529d..64333944e 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -34,6 +34,8 @@ jobs:
   renovate:
     name: Renovate
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
     steps:
       - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
 
@@ -53,7 +55,7 @@ jobs:
 
       - run: sudo chown -R runneradmin:root /tmp/renovate/
 
-      - run: ls $cache_dir
+      - run: tree $cache_dir
 
       - name: Generate a token
         id: generate_token
@@ -74,10 +76,15 @@ jobs:
           RENOVATE_AUTODISCOVER: true
           RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
 
-      - id: hash
-        run: echo "hash=$(find ${{ env.cache_dir }} -type f -print0 | sort -z | xargs -0 sha256sum | sha256sum)" >> "$GITHUB_OUTPUT"
+      - name: delete old cache
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+        run: gh cache delete ${{ steps.restore-cache.outputs.cache-primary-key }}
+        continue-on-error: true
       - uses: actions/cache/save@v4.0.2
         if: github.event.inputs.repoCache != 'disabled'
         with:
-          key: ${{ steps.restore-cache.outputs.cache-primary-key }}-${{ steps.hash.outputs.hash }}
+          key: ${{ steps.restore-cache.outputs.cache-primary-key }}
           path: ${{ env.cache_dir }}
+