diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000..9039e0a
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,18 @@
+{
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "packageRules": [
+    {
+      "description": "Group all GitHub Actions updates into single PR",
+      "matchManagers": ["github-actions"],
+      "groupName": "GitHub Actions"
+    },
+    {
+      "description": "Disable container image updates - GitHub Actions pinning only",
+      "matchDatasources": ["docker"],
+      "enabled": false
+    }
+  ]
+}