diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 000000000..39a2b6e9a
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base"
+  ]
+}
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 000000000..f467ecdb2
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,26 @@
+name: Renovate
+on:
+  schedule:
+    # The "*" (#42, asterisk) character has special semantics in YAML, so this
+    # string has to be quoted.
+    - cron: '15 * * * *'
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    permissions:
+      contents: read
+      id-token: write
+      pull-requests: write
+      issues: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v40.1.5
+        env:
+          RENOVATE_REPOSITORIES: '["${{ github.repository }}"]'
+        with:
+          token: '${{ secrets.GITHUB_TOKEN }}'