diff --git a/.gitattributes b/.gitattributes
index 0df6e528f..b114c596b 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,4 @@
 # Unified diff context has a marker before Go tabs and blank lines.
 packages/system/capi-providers-infraprovider/images/cluster-api-provider-kubevirt/patches/*.diff -whitespace
 packages/system/cilium/images/cilium-operator/patches/*.diff -whitespace
+packages/system/seaweedfs/images/seaweedfs/patches/*.diff -whitespace
diff --git a/.github/renovate.json b/.github/renovate.json
index 408674a15..5d19171aa 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -100,6 +100,12 @@
       "matchUpdateTypes": ["major", "minor"],
       "enabled": false
     },
+    {
+      "description": "The seaweedfs rebuild compiles one upstream release with the Go toolchain upstream's docker/Dockerfile.go_build uses at that tag, lays it over the upstream image of that tag, and `make update` in packages/system/seaweedfs re-pins the builder, the base image digest and the source checksum from there. A Renovate bump of any of them builds a combination upstream never shipped, and the next `make update` silently reverts it. Updates are disabled here; all of them move with the SeaweedFS version.",
+      "matchManagers": ["dockerfile"],
+      "matchFileNames": ["packages/system/seaweedfs/images/seaweedfs/**"],
+      "enabled": false
+    },
     {
       "description": "kubevirt.io/csi-driver is pinned to an untagged pseudo-version commit and publishes no release tags, so Renovate's go datasource returns no-result and the lookup failure lingers on the Dependency Dashboard. Disable it; this module is advanced deliberately alongside the kubevirt-csi-driver image build.",
       "matchManagers": ["gomod"],