diff --git a/renovate-config.json b/renovate-config.json
index d34b948..1660846 100644
--- a/renovate-config.json
+++ b/renovate-config.json
@@ -6,6 +6,11 @@
 	"labels": ["dependencies"],
 	"platformAutomerge": true,
 	"packageRules": [
+		{
+			"description": "Pin kysely to 0.28.x fleet-wide. 0.29.x dropped the DEFAULT_MIGRATION_LOCK_TABLE exports that @better-auth/kysely-adapter bundles, breaking every game's api-core build. Do NOT allow >=0.29 until better-auth ships a 0.29-safe adapter.",
+			"matchPackageNames": ["kysely"],
+			"allowedVersions": "<0.29.0"
+		},
 		{
 			"description": "Bump the internal @played/* packages together. Manual merge — 0.x bumps can be breaking and merging redeploys the game.",
 			"matchPackageNames": ["/^@played//"],