diff --git a/.github/renovate.json b/.github/renovate.json
index 42603b48..20ca4d2b 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,19 +1,48 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base"
+    "config:base",
+    "default:pinDigestsDisabled",
+    "github>whitesource/merge-confidence:beta",
+    "docker:disable"
   ],
   "assignees": [
     "notandy"
   ],
+  "commitMessageAction": "Renovate: Update",
+  "constraints": {
+    "go": "1.21.4"
+  },
+  "postUpdateOptions": [
+    "gomodTidy",
+    "gomodUpdateImportPaths"
+  ],
   "packageRules": [
     {
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-      "automerge": true
+      "matchPackageNames": [
+        "golang"
+      ],
+      "allowedVersions": "1.21.4.x"
+    },
+    {
+      "matchPackagePatterns": [
+        "^github\\.com\\/sapcc\\/.*"
+      ],
+      "automerge": true,
+      "groupName": "github.com/sapcc"
     },
     {
-      "matchPackageNames": ["github.com/getsentry/sentry-go"],
-      "enabled": false
+      "excludePackagePatterns": [
+        "^github\\.com\\/sapcc\\/.*"
+      ],
+      "matchPackagePatterns": [
+        ".*"
+      ],
+      "groupName": "External dependencies"
     }
-  ]
+  ],
+  "prHourlyLimit": 0,
+  "schedule": [
+    "before 8am on Friday"
+  ],
+  "semanticCommits": "disabled"
 }