diff --git a/.github/workflows/auto-approve-bot-prs.yml b/.github/workflows/auto-approve-bot-prs.yml
index 24a6395..9f5552e 100644
--- a/.github/workflows/auto-approve-bot-prs.yml
+++ b/.github/workflows/auto-approve-bot-prs.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Approve verified Renovate PRs
-        uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@45d01defd5070a9c05f0b3bf9b28995487bd8262
+        uses: StackVista/renovate-config/.github/actions/auto-approve-renovate@9e21a606e5995439dc37b1da98754da9983989a0 # v1.1.0
         with:
           app-client-id: ${{ vars.RENOVATE_APPROVAL_GH_APP_CLIENT_ID }}
           app-private-key: ${{ secrets.RENOVATE_APPROVAL_GH_APP_PRIVATE_KEY }}
diff --git a/renovate.json b/renovate.json
index b09043b..1567465 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,8 +1,8 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "github>StackVista/renovate-config",
-    "github>StackVista/renovate-config:go"
+    "github>StackVista/renovate-config#v1.1.0",
+    "github>StackVista/renovate-config:go#v1.1.0"
   ],
   "osvVulnerabilityAlerts": true,
   "minimumReleaseAge": "7 days",
@@ -220,6 +220,20 @@
       "matchJsonata": ["isVulnerabilityAlert = true or $exists(vulnerabilityFixVersion)"],
       "minimumReleaseAge": null,
       "prPriority": 20
+    },
+    {
+      "matchManagers": [
+        "renovate-config",
+        "github-actions"
+      ],
+      "matchPackageNames": [
+        "StackVista/renovate-config"
+      ],
+      "groupName": "Renovate configuration",
+      "groupSlug": "renovate-config",
+      "separateMajorMinor": false,
+      "separateMinorPatch": false,
+      "automerge": false
     }
   ]
 }