diff --git a/.github/renovate.json5 b/.github/renovate.json5
index e3c3e433f..b34d1dcab 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -31,6 +31,12 @@
       automerge: false,
     },
   ],
+  // Updates lockfile for prebuilt-debian after if package.json is updated, otherwise only root lockfile is updated
+  postUpgradeTasks: {
+    commands: ["cd deployments/prebuilt-debian && pnpm install --ignore-workspace --lockfile-only"],
+    fileFilters: ["deployments/prebuilt-debian/pnpm-lock.yaml"],
+    executionMode: "update",
+  },
   updateInternalDeps: true,
   rangeStrategy: "bump",
   automerge: false,