diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000000..bfe3f97ff5
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,41 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>penpot/renovate-config"],
+  "semanticCommits": "disabled",
+  "commitMessagePrefix": ":arrow_up:",
+  "commitMessageAction": "Update",
+  "pinDigest": {
+    "commitMessageAction": "Pin"
+  },
+  "nvm": {
+    "enabled": false
+  },
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Keep .nvmrc in sync with the DHI Node image",
+      "managerFilePatterns": ["/^\\.nvmrc$/"],
+      "matchStrings": ["v(?<currentValue>\\d+\\.\\d+\\.\\d+)"],
+      "depNameTemplate": "dhi.io/node",
+      "datasourceTemplate": "docker",
+      "extractVersionTemplate": "^(?<version>\\d+\\.\\d+\\.\\d+)-debian13$"
+    },
+    {
+      "customType": "regex",
+      "description": "Keep the devenv Node in sync with the DHI Node image",
+      "managerFilePatterns": ["/^docker/devenv/Dockerfile$/"],
+      "matchStrings": ["NODE_VERSION=v(?<currentValue>\\d+\\.\\d+\\.\\d+)"],
+      "depNameTemplate": "dhi.io/node",
+      "datasourceTemplate": "docker",
+      "extractVersionTemplate": "^(?<version>\\d+\\.\\d+\\.\\d+)-debian13$"
+    }
+  ],
+  "packageRules": [
+    {
+      "description": "Node versions in plain text have no digest to pin",
+      "matchManagers": ["custom.regex"],
+      "matchDatasources": ["docker"],
+      "pinDigests": false
+    }
+  ]
+}