diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..947c38c
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,41 @@
+{
+  "extends": [
+    "config:best-practices",
+    ":gitSignOff",
+    ":rebaseStalePrs",
+    "group:linters",
+    "group:test",
+    ":preserveSemverRanges"
+  ],
+  "ignorePresets": [
+    ":pinDevDependencies",
+    ":pinDigest",
+    "docker:pinDigests",
+    "group:monorepos"
+  ],
+  "labels": ["dependencies"],
+  "postUpdateOptions": ["yarnDedupeHighest"],
+  "osvVulnerabilityAlerts": false,
+  "vulnerabilityAlerts": {
+    "enabled": false,
+    "labels": ["dependencies", "security"]
+  },
+  "npm": {
+    "minimumReleaseAge": "3 days"
+  },
+  "major": {
+    "dependencyDashboardApproval": true
+  },
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "GitHub Actions"
+    },
+    {
+      "groupName": "Core Backstage packages",
+      "dependencyDashboardApproval": true,
+      "matchDepNames": ["/^@backstage//"]
+    }
+  ],
+  "ignorePaths": ["**/dist-dynamic/**"]
+}