diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index c6fcef4..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-version: 2
-updates:
-- package-ecosystem: cargo
-  directory: "/"
-  schedule:
-    interval: monthly
-    time: "07:00"
-  open-pull-requests-limit: 10
diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000..9abd351
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,15 @@
+{
+  "semanticCommits": "enabled",
+  "configMigration": true,
+  "packageRules": [
+    // Goals:
+    // - Rollup safe upgrades to reduce CI runner load
+    // - Have lockfile and manifest in-sync
+    {
+      "matchManagers": ["cargo"],
+      "matchUpdateTypes": ["patch"],
+      "automerge": true,
+      "groupName": "safe",
+    },
+  ],
+}
diff --git a/committed.toml b/committed.toml
index 08815cf..4211ae3 100644
--- a/committed.toml
+++ b/committed.toml
@@ -1,3 +1,3 @@
 style="conventional"
-ignore_author_re="dependabot"
+ignore_author_re="(dependabot|renovate)"
 merge_commit = false