diff --git a/Dockerfile b/Dockerfile
index 9d19386..e0c6d3b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,13 @@
-FROM "python:3.14-alpine"
+FROM python:3.14-alpine
 ARG BUILD_DATE
 ARG VCS_REF
 ARG VERSION
+ARG ANSIBLE_LINT_VERSION=26.4.0
 
 # hadolint ignore=DL3018,DL3013
 RUN apk --no-cache add --virtual build-dependencies \
         build-base libffi-dev libressl-dev && \
-    pip install --no-cache-dir ansible-lint && \
+    pip install --no-cache-dir ansible-lint==${ANSIBLE_LINT_VERSION} && \
     apk del build-dependencies
 
 LABEL "maintainer"="dockerimages@cabillot.eu" \
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..56b5994
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,15 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "gitlabci": {
+    "enabled": false
+  },
+  "regexManagers": [
+    {
+      "description": "Track ansible-lint pip version from ARG in Dockerfile",
+      "fileMatch": ["^Dockerfile$"],
+      "matchStrings": ["ARG ANSIBLE_LINT_VERSION=(?<currentValue>[\\d.]+)\\n"],
+      "depNameTemplate": "ansible-lint",
+      "datasourceTemplate": "pypi"
+    }
+  ]
+}