diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index f99b8a2..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,10 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 0
-    commit-message:
-      prefix: "chore"
-      include: "scope"
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 71b4617..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    ":semanticCommits",
-    "config:recommended"
-  ],
-  "packageRules": [
-    {
-      "matchDatasources": [
-        "docker"
-      ],
-      "commitMessagePrefix": "chore(docker):"
-    }
-  ]
-}
diff --git a/renovate.json5 b/renovate.json5
new file mode 100644
index 0000000..3fb3cd7
--- /dev/null
+++ b/renovate.json5
@@ -0,0 +1,68 @@
+{
+    $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+    extends: [
+        'config:recommended',
+        'docker:enableMajor',
+        ':semanticCommits',
+    ],
+    labels: [
+        'dependencies',
+        'filigran team',
+    ],
+    minimumReleaseAge: '3 days',
+    prHourlyLimit: 100,
+    prConcurrentLimit: 60,
+    branchConcurrentLimit: 60,
+    timezone: 'Europe/Paris',
+    schedule: [
+        '* 0-4,22-23 * * 1-5',
+        '* * * * 0,6',
+    ],
+    updateNotScheduled: false,
+    rebaseWhen: 'conflicted',
+    vulnerabilityAlerts: {
+        // as we don't rely on Renovate to be informed of dependency security advisories,
+        // vulnerabilityAlerts is disabled since it can cause problems by skipping minimumReleaseAge, schedule and others constraints
+        enabled: false,
+    },
+    packageRules: [
+        {
+            matchDatasources: [
+                'docker',
+            ],
+            commitMessagePrefix: 'chore(docker):',
+        },
+        {
+            description: 'Majors are proposed on the Dependency Dashboard, not as a standing PR',
+            matchUpdateTypes: [
+                'major',
+            ],
+            dependencyDashboardApproval: true,
+        },
+        {
+            groupName: 'ci tooling (non-major)',
+            groupSlug: 'ci-tooling-non-major',
+            description: 'Batch non-major GitHub Actions updates once a week on Sunday',
+            schedule: [
+                '* * * * 0',
+            ],
+            matchManagers: [
+                'github-actions',
+            ],
+            matchUpdateTypes: [
+                'minor',
+                'patch',
+                'pin',
+                'digest',
+            ],
+            rebaseWhen: 'auto',
+        },
+        {
+            description: 'docker.elastic.co publishes no release timestamp, so minimumReleaseAge would hold every update as pending',
+            matchPackageNames: [
+                'docker.elastic.co/**',
+            ],
+            minimumReleaseAge: null,
+        },
+    ],
+}