diff --git a/default.json b/default.json
index 5af3bde..99fa1cb 100644
--- a/default.json
+++ b/default.json
@@ -1,10 +1,30 @@
 {
-  "configMigration": true,
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "packageRules": [
+    {
+      "matchDepTypes": ["devDependencies", "require-dev"],
+      "matchUpdateTypes": ["patch", "minor", "digest"],
+      "groupName": "devDependencies (non-major)"
+    },
+    {
+      "matchDepTypes": ["dependencies"],
+      "matchUpdateTypes": ["major", "patch", "minor", "digest"],
+      "groupName": "dependencies (major and minor)"
+    }
+  ],
   "extends": [
     "config:recommended",
-    "docker:pinDigests",
-    "helpers:pinGitHubActionDigests",
+    ":preserveSemverRanges",
+    ":dependencyDashboard",
+    ":rebaseStalePrs",
     ":semanticCommits",
-    ":pinDevDependencies"
-  ]
+    ":enableVulnerabilityAlertsWithLabel('security')",
+    "group:allNonMajor",
+    ":updateNotScheduled",
+    "mergeConfidence:all-badges"
+  ],
+  "lockFileMaintenance": {
+    "enabled": true,
+    "schedule": ["before 4am"]
+  }
 }