diff --git a/.gitea/workflows/renovate.yml b/.gitea/workflows/renovate.yml
index 72c9645..f4b94bb 100644
--- a/.gitea/workflows/renovate.yml
+++ b/.gitea/workflows/renovate.yml
@@ -31,6 +31,9 @@ jobs:
           RENOVATE_REPOSITORIES: homelab/stack
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
           RENOVATE_BINARY_SOURCE: global
+          # Global-only option (a repo renovate.json may not set it). The only
+          # github.com deps left are ones packageRules disable on purpose.
+          RENOVATE_GITHUB_TOKEN_WARN: "false"
           # Optional. Without it, github.com lookups (github-tags/-releases
           # pins) share the anonymous 60/h limit, which the -full image and
           # fetchChangeLogs=off keep this repo well under. Add the secret (a
diff --git a/renovate.json b/renovate.json
index af87cd9..aa9e814 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,7 +8,6 @@
   "prHourlyLimit": 0,
   "minimumReleaseAge": "7 days",
   "fetchChangeLogs": "off",
-  "githubTokenWarn": false,
   "ignorePaths": [
     "**/node_modules/**",
     "**/bower_components/**",