diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000000..bb9a778b58
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,4 @@
+{
+  "extends": ["config:base", "helpers:pinGitHubActionDigests"],
+  "cloneSubmodules": true
+}