diff --git a/renovate.json b/renovate.json
index 34f4725a..68ca0d6a 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,84 +1,93 @@
 {
-    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": [
-      "config:base"
-    ],
-    "branchPrefix": "renovate-",
-    "commitMessageAction": "Renovate Update",
-    "labels": [
-      "Dependencies",
-      "Renovate"
-    ],
-    "packageRules": [
-      {
-        "description": "Terraform: bundle all updates together",
-        "labels": ["devDependencies", "Renovate", "Terraform"],
-        "groupName": "Terraform",
-        "matchUpdateTypes": ["minor", "patch"],
-        "matchManagers": ["terraform"]
-      },
-      {
-        "groupName": "Patch & Minor Updates",
-        "groupSlug": "all-minor-patch-updates",
-        "labels": [
-          "Dependencies",
-          "Renovate"
-        ],
-        "matchPackagePatterns": [
-          "*"
-        ],
-        "matchUpdateTypes": [
-          "minor",
-          "patch"
-        ],
-        "prCreation": "immediate",
-        "prPriority": 0,
-        "stabilityDays": 3
-      },
-      {
-        "groupName": "GitHub Actions",
-        "matchPackagePatterns": [
-          "actions/*"
-        ],
-        "automerge": true,
-        "dependencyDashboardApproval": true,
-        "labels": [
-          "Dependencies",
-          "Renovate"
-        ],
-        "prTitle": "chore(deps): update GitHub Actions",
-        "prBody": "Updates the following GitHub Actions dependencies:\n\n{{#each dependencies}}- {{this.name}}\n{{/each}}",
-        "prCreation": "immediate",
-        "schedule": [
-          "after 6am and before 9am on Monday"
-        ],
-        "stabilityDays": 3
-      }
-    ],
-    "major": {
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "branchPrefix": "renovate-",
+  "commitMessageAction": "Renovate Update",
+  "labels": [
+    "Dependencies",
+    "Renovate"
+  ],
+  "packageRules": [
+    {
+      "description": "Terraform: bundle all updates together",
       "labels": [
-          "Dependencies",
-          "Renovate"
+        "devDependencies",
+        "Renovate",
+        "Terraform"
+      ],
+      "groupName": "Terraform",
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
+      "matchManagers": [
+        "terraform"
+      ]
+    },
+    {
+      "groupName": "Patch & Minor Updates",
+      "groupSlug": "all-minor-patch-updates",
+      "labels": [
+        "Dependencies",
+        "Renovate"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
       ],
       "prCreation": "immediate",
-      "rangeStrategy": "pin",
-      "prPriority": 1
+      "prPriority": 0,
+      "minimumReleaseAge": "3 days",
+      "matchPackageNames": [
+        "*"
+      ]
     },
-    "branchConcurrentLimit": 5,
-    "prConcurrentLimit": 3,
-    "prHourlyLimit": 1,
-    "vulnerabilityAlerts": {
-      "groupName": "Security Alerts",
+    {
+      "groupName": "GitHub Actions",
+      "automerge": true,
+      "dependencyDashboardApproval": true,
       "labels": [
         "Dependencies",
         "Renovate"
       ],
-      "dependencyDashboardApproval": false,
-      "stabilityDays": 0,
-      "rangeStrategy": "pin",
-      "commitMessagePrefix": "[SECURITY]",
-      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "prTitle": "chore(deps): update GitHub Actions",
+      "prBody": "Updates the following GitHub Actions dependencies:\n\n{{#each dependencies}}- {{this.name}}\n{{/each}}",
       "prCreation": "immediate",
-      "prPriority": 5
+      "schedule": [
+        "after 6am and before 9am on Monday"
+      ],
+      "minimumReleaseAge": "3 days",
+      "matchPackageNames": [
+        "/actions/*/"
+      ]
     }
-  }
\ No newline at end of file
+  ],
+  "major": {
+    "labels": [
+      "Dependencies",
+      "Renovate"
+    ],
+    "prCreation": "immediate",
+    "rangeStrategy": "pin",
+    "prPriority": 1
+  },
+  "branchConcurrentLimit": 5,
+  "prConcurrentLimit": 3,
+  "prHourlyLimit": 1,
+  "vulnerabilityAlerts": {
+    "groupName": "Security Alerts",
+    "labels": [
+      "Dependencies",
+      "Renovate"
+    ],
+    "dependencyDashboardApproval": false,
+    "minimumReleaseAge": null,
+    "rangeStrategy": "pin",
+    "commitMessagePrefix": "[SECURITY]",
+    "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+    "prCreation": "immediate",
+    "prPriority": 5
+  }
+}