diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 5ed0185..d43b4de 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -61,11 +61,22 @@ jobs:
       - name: Lint YAML syntax
         shell: bash
         run: |
+          mapfile -t yaml_files < <(
+            git ls-files '*.yaml' '*.yml' \
+              ':!node_modules/**' \
+              ':!**/.venv/**'
+          )
+
+          if [ "${#yaml_files[@]}" -eq 0 ]; then
+            echo "No YAML files found."
+            exit 0
+          fi
+
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
             cytopia/yamllint:latest \
-            -c .yamllint .
+            -c .yamllint "${yaml_files[@]}"
 
   lint-dockerfiles:
     runs-on: [self-hosted, linux, arch, homelab]
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5ed0185..d43b4de 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -61,11 +61,22 @@ jobs:
       - name: Lint YAML syntax
         shell: bash
         run: |
+          mapfile -t yaml_files < <(
+            git ls-files '*.yaml' '*.yml' \
+              ':!node_modules/**' \
+              ':!**/.venv/**'
+          )
+
+          if [ "${#yaml_files[@]}" -eq 0 ]; then
+            echo "No YAML files found."
+            exit 0
+          fi
+
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
             cytopia/yamllint:latest \
-            -c .yamllint .
+            -c .yamllint "${yaml_files[@]}"
 
   lint-dockerfiles:
     runs-on: [self-hosted, linux, arch, homelab]
diff --git a/prometheus-stack/k8s/traefik-alerts.yaml b/prometheus-stack/k8s/traefik-alerts.yaml
index 8f15d92..6b449b5 100644
--- a/prometheus-stack/k8s/traefik-alerts.yaml
+++ b/prometheus-stack/k8s/traefik-alerts.yaml
@@ -57,4 +57,4 @@ spec:
             severity: warning
           annotations:
             summary: "Traefik TLS certificate expires soon"
-            description: "A TLS certificate managed by Traefik expires in less than 14 days (in {{ $value | humanizeDuration }})."
\ No newline at end of file
+            description: "A TLS certificate managed by Traefik expires in less than 14 days (in {{ $value | humanizeDuration }})."
diff --git a/renovate.json b/renovate.json
index 340952e..9901987 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,44 +1,27 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
-  "enabledManagers": [
-    "docker-compose",
-    "kubernetes"
-  ],
+  "extends": ["config:recommended"],
+  "enabledManagers": ["docker-compose", "kubernetes"],
   "kubernetes": {
-    "managerFilePatterns": [
-      "/k8s/.+\\.ya?ml$/"
-    ]
+    "managerFilePatterns": ["/k8s/.+\\.ya?ml$/"]
   },
   "packageRules": [
     {
       "description": "Keep private homelab images unchanged",
-      "matchDatasources": [
-        "docker"
-      ],
-      "matchPackageNames": [
-        "/gcr\\.forust\\.xyz\\/forust\\/.+/"
-      ],
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["/gcr\\.forust\\.xyz\\/forust\\/.+/"],
       "enabled": false
     },
     {
       "description": "Require approval for major upgrades",
-      "matchUpdateTypes": [
-        "major"
-      ],
+      "matchUpdateTypes": ["major"],
       "dependencyDashboardApproval": true,
       "automerge": false
     },
     {
       "description": "Group container patch updates",
-      "matchDatasources": [
-        "docker"
-      ],
-      "matchUpdateTypes": [
-        "patch"
-      ],
+      "matchDatasources": ["docker"],
+      "matchUpdateTypes": ["patch"],
       "groupName": "container patch updates"
     }
   ]