diff --git a/default.json b/default.json
index 99fa1cb..5af3bde 100644
--- a/default.json
+++ b/default.json
@@ -1,30 +1,10 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "packageRules": [
-    {
-      "matchDepTypes": ["devDependencies", "require-dev"],
-      "matchUpdateTypes": ["patch", "minor", "digest"],
-      "groupName": "devDependencies (non-major)"
-    },
-    {
-      "matchDepTypes": ["dependencies"],
-      "matchUpdateTypes": ["major", "patch", "minor", "digest"],
-      "groupName": "dependencies (major and minor)"
-    }
-  ],
+  "configMigration": true,
   "extends": [
     "config:recommended",
-    ":preserveSemverRanges",
-    ":dependencyDashboard",
-    ":rebaseStalePrs",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests",
     ":semanticCommits",
-    ":enableVulnerabilityAlertsWithLabel('security')",
-    "group:allNonMajor",
-    ":updateNotScheduled",
-    "mergeConfidence:all-badges"
-  ],
-  "lockFileMaintenance": {
-    "enabled": true,
-    "schedule": ["before 4am"]
-  }
+    ":pinDevDependencies"
+  ]
 }