diff --git a/renovate.json b/renovate.json
index f45d8f11..9a9a0b54 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,5 +1,26 @@
 {
   "extends": [
-    "config:base"
-  ]
+    "config:base",
+    ":rebaseStalePrs",
+    ":dependencyDashboard"
+  ],
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": ["security"]
+  },
+  "labels": ["dependencies"],
+  "rollbackPrs": true,
+  "rebaseWhen": "auto",
+  "addLabels": ["dependencies"],
+  "stabilityDays": 3,
+  "postUpdateOptions": [
+    "gomodTidy"
+  ],
+"packageRules": [
+  {
+    "description": "Automatically merge minor and patch-level updates",
+    "matchUpdateTypes": ["minor", "patch", "digest"],
+    "automerge": true
+  }
+]
 }