diff --git a/.reuse/dep5 b/.reuse/dep5
index 3bf3a5c..940e5a5 100644
--- a/.reuse/dep5
+++ b/.reuse/dep5
@@ -3,11 +3,11 @@ Upstream-Name: ki-frontend
 Upstream-Contact: Scammo <kontakt@samuelbrinkmann.de>
 Source: https://git.wtf-eg.de/kompetenzinventar/ki-frontend
 
-Files: package.json package-lock.json
+Files: package.json package-lock.json renovate.json
 Copyright: WTF Kooperative eG <https://wtf-eg.de/>
 License: AGPL-3.0-or-later
 
-Files: .browserslistrc .dockerignore .eslintrc.js .gitignore 
+Files: .browserslistrc .dockerignore .eslintrc.js .gitignore
 Copyright: WTF Kooperative eG <https://wtf-eg.de/>
 License: AGPL-3.0-or-later
 
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..e0244fb
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:best-practices",
+    "group:linters",
+    "group:test",
+    "npm:unpublishSafe",
+    ":disableDependencyDashboard",
+    ":maintainLockFilesWeekly",
+    ":pinAllExceptPeerDependencies",
+    ":separateMultipleMajorReleases"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": [
+        "node"
+      ],
+      "allowedVersions": "/^[1-9][02468]\\./"
+    }
+  ]
+}