diff --git a/.github/renovate.json b/.github/renovate.json
index 470ad4fc37..3218e4a0d2 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -38,6 +38,12 @@
       "dependencyDashboardApproval": false,
       "schedule": ["every weekday"]
     },
+    {
+      "description": "TypeScript majors are a toolchain migration (typecheck, declaration emit, every TS-peer'd build tool), not a dep bump; gate them behind dashboard approval while minors/patches stay fast-tracked",
+      "matchPackageNames": ["typescript"],
+      "matchUpdateTypes": ["major"],
+      "dependencyDashboardApproval": true
+    },
     {
       "description": "Group Tailwind packages",
       "matchPackageNames": ["/tailwind/"],