diff --git a/.changeset/group-hk-config-with-hk.md b/.changeset/group-hk-config-with-hk.md
new file mode 100644
index 00000000..4b32b8d7
--- /dev/null
+++ b/.changeset/group-hk-config-with-hk.md
@@ -0,0 +1,4 @@
+---
+---
+
+Group hk-config with hk in the shared Renovate preset
diff --git a/AGENTS.md b/AGENTS.md
index 73c3b622..7ba27552 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -447,6 +447,20 @@ it imports `Defaults.pkl` by relative path, and `PklProject` neither
 matches the `.pkl` file pattern nor contains a literal version (its
 `packageZipUrl` is an interpolation).
 
+`hk-config` is grouped with `hk` by a `packageRule`, so a consumer with
+both pending gets one branch instead of two. The two are mutually
+coupled — `Defaults.pkl` is written against a specific hk
+`Config`/`Builtins` version, and a consumer's `hk.pkl` pins hk twice (the
+`amends` URL and the mise binary) — so either bump landing alone can
+break the other direction, and both edit `hk.pkl`, so the second PR
+always has to rebase. The rule matches `depName` (`hk-config`, as emitted
+by the customManager) rather than `matchSourceUrls`, because the same
+source URL also covers `@gtbuchanan/cli`, which does not belong in the hk
+group. Grouping doesn't _enforce_ a compatible pair — Renovate still
+picks each dep's own latest — it removes the broken intermediate states
+and lets one CI run validate the real combination. It's inert in tooling
+itself, which has no `hk-config` dep to bump.
+
 ### Turbo cache miss on workspace edits
 
 A source change in a `packages/*` workspace often invalidates every
diff --git a/default.json b/default.json
index 6c4a7c5b..430e7436 100644
--- a/default.json
+++ b/default.json
@@ -52,6 +52,16 @@
         "https://github.com/jdx/hk"
       ]
     },
+    {
+      "description": "Fold hk-config into the hk group — Defaults.pkl is built against a specific hk Config/Builtins version, so the amends pin and the hk-config import must move together or both intermediate states break. Matched by depName (emitted by the hk-config customManager above), not by source URL: gtbuchanan/tooling also publishes @gtbuchanan/cli, which must stay out of this group",
+      "groupName": "hk",
+      "matchDatasources": [
+        "github-releases"
+      ],
+      "matchDepNames": [
+        "hk-config"
+      ]
+    },
     {
       "description": "Group pkl updates (mise tool + .chezmoidata version comment share one apple/pkl release)",
       "groupName": "pkl",