diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..329dd44
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,21 @@
+{
+  "nix": {
+    "enabled": true
+  },
+  "lockFileMaintenance": {
+    "enabled": true,
+    "automerge": true
+  },
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions"],
+      "automerge": true
+    }
+  ],
+  "rebaseWhen": "behind-base-branch",
+  "schedule": ["after 11pm on Monday"],
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ]
+}