diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..06e95ad
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,38 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["helpers:pinGitHubActionDigests"],
+  "prHourlyLimit": 0,
+  "lockFileMaintenance": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "GitHub Actions"
+    },
+    {
+      "matchManagers": ["pep621"],
+      "matchDepTypes": [
+        "project.dependencies",
+        "project.optional-dependencies"
+      ],
+      "matchFileNames": ["pyproject.toml"],
+      // We manage production dependencies ourselves, only bumping
+      // when necessary.
+      "enabled": false
+    },
+    {
+      "matchCategories": ["python"],
+      "groupName": "Python dependencies"
+    },
+    {
+      "matchDatasources": ["golang-version"],
+      "groupName": "Go"
+    },
+    {
+      "matchCategories": ["golang"],
+      "matchDatasources": ["go"],
+      "groupName": "Go dependencies"
+    }
+  ]
+}