diff --git a/renovate.json b/renovate.json
index 5db72dd6..e41d52c5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,14 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
-  ]
+    "config:recommended",
+    ":ignoreUnstable",
+    ":enableVulnerabilityAlertsWithLabel(security)",
+    "helpers:pinGitHubActionDigests",
+    ":separateMultipleMajorReleases"
+  ],
+  "assigneesFromCodeOwners": true,
+  "labels": ["renovate"],
+  "timezone": "Europe/Amsterdam",
+  "rebaseWhen": "never"
 }