diff --git a/admin-system/renovate.yaml b/admin-system/renovate.yaml
index e2e7dd2..e395b5c 100644
--- a/admin-system/renovate.yaml
+++ b/admin-system/renovate.yaml
@@ -46,7 +46,6 @@ data:
       "dependencyDashboardTitle": "Renovate Dependency Dashboard",
       "prHourlyLimit": 8,
       "prConcurrentLimit": 8,
-      "minimumReleaseAgeBehaviour": "timestamp-optional",
       "enabledManagers": ["kubernetes", "helm-values"],
       "kubernetes": {
         "managerFilePatterns": ["/.+\\.ya?ml$/"]
@@ -92,9 +91,10 @@ data:
           "automerge": false
         },
         {
-          "description": "termix: non-semver release-X.Y.Z tag (regex versioning parses the whole tag incl. prefix; loose+extractVersion silently skips because currentValue fails the loose parser before extractVersion is applied)",
+          "description": "termix: regex versioning parses the release-X.Y.Z prefix; minimumReleaseAge:0 bypasses the stability gate because ghcr.io OCI manifests for this image don't expose a release timestamp (timestamp-required mode otherwise holds it forever). Major bumps still queue for dashboard approval via the global major rule.",
           "matchPackageNames": ["ghcr.io/lukegus/termix"],
-          "versioning": "regex:^release-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$"
+          "versioning": "regex:^release-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+          "minimumReleaseAge": "0 days"
         },
         {
           "description": "wanderer: db + web update together in one PR",