diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ba88d42..bcb8a5e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -36,6 +36,8 @@ updates:
     ignore:
       - dependency-name: "actions/checkout"
       - dependency-name: "actions/setup-java"
+      # The family's shared check, pinned by tag beside conventions.json and moved with it.
+      - dependency-name: "*robertblust/conventions*"
     groups:
       actions:
         patterns:
diff --git a/AGENTS.md b/AGENTS.md
index 70843e4..289f978 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -11,7 +11,7 @@ Shared conventions of the robertblust, guestgraph and companygraph organizations
 
 Everything below this block is this repository's own. `sh conventions/conventions-sync check` says whether the copy matches the release, `sync` brings it to the release the pin names, and `sh conventions/conventions-check` holds this repository's own Markdown to `WRITING.md`, and `sh conventions/conventions-format` to its one form, which `fix` writes. Edit a shared file in robertblust/conventions, never here.
 <!-- end conventions -->
-<!-- service-conventions · v0.12.0 -->
+<!-- service-conventions · v0.13.0 -->
 The code-level rules of every guestgraph service on the Spring stack live in `service-conventions/`, vendored from guestgraph/service-conventions at the release `service-conventions.json` names: the parent build every `pom.xml` takes by path, the source rules, the architecture rules in `src/test/java/ServiceRulesTest.java`, the diagram script, the API generator `regen-api` that writes the one `openapi.yaml` the service serves from the sources named beside it, the workflow in `.github/workflows/verify.yml`, the Maven wrapper, and this block. `sh service-conventions/service-conventions-sync check` says whether the copy matches the release, `sync` brings it to the release the pin names, and `sh service-conventions/service-conventions-check` says what of the list the service lacks. What every service has, whatever its stack, is `SERVICE.md` there. Edit a shared file in guestgraph/service-conventions, never here.
 <!-- end service-conventions -->
 
diff --git a/pom.xml b/pom.xml
index a50066a..8fa0acf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
   <parent>
     <groupId>io.guestgraph</groupId>
     <artifactId>service-parent</artifactId>
-    <version>0.12.0</version>
+    <version>0.13.0</version>
     <relativePath>service-conventions/pom.xml</relativePath>
   </parent>
 
diff --git a/service-conventions.json b/service-conventions.json
index c256214..82739b6 100644
--- a/service-conventions.json
+++ b/service-conventions.json
@@ -1 +1 @@
-{ "repo": "guestgraph/service-conventions", "tag": "v0.12.0", "stack": "spring", "root": "io.guestgraph.engine", "scope": "tenantId", "schema": "engine", "jdbcClientAllowed": ["io.guestgraph.engine.resolution.TenantLock", "io.guestgraph.engine.config.LocalDevSeeder"] }
+{ "repo": "guestgraph/service-conventions", "tag": "v0.13.0", "stack": "spring", "root": "io.guestgraph.engine", "scope": "tenantId", "schema": "engine", "jdbcClientAllowed": ["io.guestgraph.engine.resolution.TenantLock", "io.guestgraph.engine.config.LocalDevSeeder"] }
diff --git a/service-conventions/AGENTS.md b/service-conventions/AGENTS.md
index f043383..ae62307 100644
--- a/service-conventions/AGENTS.md
+++ b/service-conventions/AGENTS.md
@@ -1,3 +1,3 @@
-<!-- service-conventions · v0.12.0 -->
+<!-- service-conventions · v0.13.0 -->
 The code-level rules of every guestgraph service on the Spring stack live in `service-conventions/`, vendored from guestgraph/service-conventions at the release `service-conventions.json` names: the parent build every `pom.xml` takes by path, the source rules, the architecture rules in `src/test/java/ServiceRulesTest.java`, the diagram script, the API generator `regen-api` that writes the one `openapi.yaml` the service serves from the sources named beside it, the workflow in `.github/workflows/verify.yml`, the Maven wrapper, and this block. `sh service-conventions/service-conventions-sync check` says whether the copy matches the release, `sync` brings it to the release the pin names, and `sh service-conventions/service-conventions-check` says what of the list the service lacks. What every service has, whatever its stack, is `SERVICE.md` there. Edit a shared file in guestgraph/service-conventions, never here.
 <!-- end service-conventions -->
diff --git a/service-conventions/dependabot.yml b/service-conventions/dependabot.yml
index ba88d42..bcb8a5e 100644
--- a/service-conventions/dependabot.yml
+++ b/service-conventions/dependabot.yml
@@ -36,6 +36,8 @@ updates:
     ignore:
       - dependency-name: "actions/checkout"
       - dependency-name: "actions/setup-java"
+      # The family's shared check, pinned by tag beside conventions.json and moved with it.
+      - dependency-name: "*robertblust/conventions*"
     groups:
       actions:
         patterns:
diff --git a/service-conventions/pom.xml b/service-conventions/pom.xml
index d7a473e..43a44a2 100644
--- a/service-conventions/pom.xml
+++ b/service-conventions/pom.xml
@@ -16,7 +16,7 @@
 
   <groupId>io.guestgraph</groupId>
   <artifactId>service-parent</artifactId>
-  <version>0.12.0</version>
+  <version>0.13.0</version>
   <packaging>pom</packaging>
   <name>GuestGraph service parent</name>
   <description>The Spring stack of every guestgraph service: platform, shared versions and the plugins that hold the source to the rules</description>