diff --git a/flake.lock b/flake.lock
index 61fa292..af7d841 100644
--- a/flake.lock
+++ b/flake.lock
@@ -201,7 +201,6 @@
     "hermes-agent": {
       "inputs": {
         "flake-parts": "flake-parts",
-        "home-manager": "home-manager",
         "nixpkgs": "nixpkgs",
         "npm-lockfile-fix": "npm-lockfile-fix",
         "pyproject-build-systems": "pyproject-build-systems",
@@ -209,17 +208,17 @@
         "uv2nix": "uv2nix"
       },
       "locked": {
-        "lastModified": 1792383372,
-        "narHash": "sha256-7hU5BRievnGyM3W2NTzPYNgEShuQODSeZM8OB0y6yGE=",
+        "lastModified": 1786698548,
+        "narHash": "sha256-mX6bWfnfB2d7vO/NfKtLsTLoYnNJiVc7GOW+uOmxZKs=",
         "owner": "NousResearch",
         "repo": "hermes-agent",
-        "rev": "5fc490e2b34123212d73ef316086f939567a725a",
+        "rev": "56a41715dc3b8bf6f50a740ff9416c4036ef4259",
         "type": "github"
       },
       "original": {
         "owner": "NousResearch",
         "repo": "hermes-agent",
-        "rev": "5fc490e2b34123212d73ef316086f939567a725a",
+        "rev": "56a41715dc3b8bf6f50a740ff9416c4036ef4259",
         "type": "github"
       }
     },
@@ -243,27 +242,6 @@
       }
     },
     "home-manager": {
-      "inputs": {
-        "nixpkgs": [
-          "hermes-agent",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1786487128,
-        "narHash": "sha256-ad60hrRVhH/bo3Jl1YLzO+QcS3mUNZr9LNJdzhMO2P4=",
-        "owner": "nix-community",
-        "repo": "home-manager",
-        "rev": "f404edbfa4117810c96b97048299242fc50e5362",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "home-manager",
-        "type": "github"
-      }
-    },
-    "home-manager_2": {
       "inputs": {
         "nixpkgs": [
           "nixpkgs"
@@ -535,7 +513,7 @@
         "google-workspace-cli": "google-workspace-cli",
         "hermes-agent": "hermes-agent",
         "hister": "hister",
-        "home-manager": "home-manager_2",
+        "home-manager": "home-manager",
         "llm-agents": "llm-agents",
         "nix-darwin": "nix-darwin",
         "nix-homebrew": "nix-homebrew",
diff --git a/flake.nix b/flake.nix
index 1a3ec24..a3e56b5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -17,8 +17,9 @@
     llm-agents.url = "github:numtide/llm-agents.nix";
     # Pinned: nix/patches/hermes_gateway_service_resources.patch backports
     # NousResearch/hermes-agent#85365 and no longer applies to newer revisions, so
-    # lock file maintenance must not move this input. Unpin once #85365 is merged.
-    hermes-agent.url = "github:NousResearch/hermes-agent/5fc490e2b34123212d73ef316086f939567a725a";
+    # neither lock file maintenance nor Renovate's digest updates may move this input
+    # (renovate.json disables it). Unpin, and drop that rule, once #85365 is merged.
+    hermes-agent.url = "github:NousResearch/hermes-agent/56a41715dc3b8bf6f50a740ff9416c4036ef4259";
     google-workspace-cli = {
       url = "github:googleworkspace/cli";
       inputs.nixpkgs.follows = "nixpkgs";
diff --git a/renovate.json b/renovate.json
index 2f92580..8f02e14 100644
--- a/renovate.json
+++ b/renovate.json
@@ -25,5 +25,13 @@
   },
   "nix": {
     "enabled": true
-  }
+  },
+  "packageRules": [
+    {
+      "description": "hermes-agent stays pinned while nix/patches/hermes_gateway_service_resources.patch backports NousResearch/hermes-agent#85365; remove this rule with the pin.",
+      "matchManagers": ["nix"],
+      "matchDepNames": ["hermes-agent"],
+      "enabled": false
+    }
+  ]
 }