diff --git a/README.md b/README.md
index c62a7ef..32b8a96 100644
--- a/README.md
+++ b/README.md
@@ -15,6 +15,8 @@ Shared Renovate config for Rstack projects.
 
 The default preset includes the security, disableNodeEngines, and disablePeerDependencies presets.
 
+For `.node-version`, the default preset preserves major-only versions (for example, `22` → `24`) and disables minor, patch, and pin updates. Set existing full versions such as `24.21.0` to a major-only value such as `24` to use this behavior.
+
 ### Security preset
 
 Use the security preset on its own to enable minimum release age checks and GitHub Actions digest pinning:
diff --git a/default.json b/default.json
index 1cfc13e..3b12d41 100644
--- a/default.json
+++ b/default.json
@@ -12,6 +12,15 @@
   "schedule": ["* 0-3 1,15 * *"],
   "rangeStrategy": "bump",
   "packageRules": [
+    {
+      "matchManagers": ["nodenv"],
+      "rangeStrategy": "replace"
+    },
+    {
+      "matchManagers": ["nodenv"],
+      "matchUpdateTypes": ["minor", "patch", "pin"],
+      "enabled": false
+    },
     {
       "matchManagers": ["github-actions"],
       "matchUpdateTypes": ["minor", "patch", "digest", "pinDigest"],