diff --git a/.forgejo/actions/setup-node/action.yml b/.forgejo/actions/setup-node/action.yml
index 9d1ce2c..037440c 100644
--- a/.forgejo/actions/setup-node/action.yml
+++ b/.forgejo/actions/setup-node/action.yml
@@ -5,11 +5,15 @@ description: 'setup node'
 runs:
   using: 'composite'
   steps:
+    - name: Setup pnpm
+      uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0
+      with:
+        standalone: true
+
     - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
       with:
         node-version-file: .node-version
-        # cache: 'npm'
-    - shell: bash
-      run: corepack enable
+        cache: 'pnpm'
+
     - shell: bash
       run: pnpm install --frozen-lockfile
diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 4eacccc..1cf98c6 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -83,9 +83,9 @@ jobs:
       matrix:
         k3s:
           - v1.27.16+k3s1 # renovate: k3s
-          - v1.28.12+k3s1 # renovate: k3s
-          - v1.29.7+k3s1 # renovate: k3s
-          - v1.30.3+k3s1 # renovate: k3s
+          - v1.28.13+k3s1 # renovate: k3s
+          - v1.29.8+k3s1 # renovate: k3s
+          - v1.30.4+k3s1 # renovate: k3s
 
     steps:
       - run: cat /etc/os-release
diff --git a/package.json b/package.json
index c2e9347..069ebcd 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
   },
   "packageManager": "pnpm@9.10.0",
   "engines": {
-    "node": "^18.12.0 || >=20.9.0",
+    "node": "^20.9.0",
     "pnpm": "^9.0.0"
   }
 }
diff --git a/renovate.json b/renovate.json
index bf6a05c..ed44a0c 100644
--- a/renovate.json
+++ b/renovate.json
@@ -87,6 +87,13 @@
       "matchUpdateTypes": ["major", "minor"],
       "automerge": false
     },
+    {
+      "description": "Group k3s patch updates",
+      "matchDatasources": ["github-releases"],
+      "matchPackageNames": ["k3s-io/k3s"],
+      "matchUpdateTypes": ["patch"],
+      "groupName": "k3s"
+    },
     {
       "description": "Use test scope for forgejo ci tests",
       "matchFileNames": ["ci/*.yaml"],