diff --git a/.drone.yml b/.drone.yml
index eb5a52a..7175902 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -12,12 +12,12 @@ trigger:
 
 steps:
   - name: lint
-    image: node:20.12.2@sha256:844b41cf784f66d7920fd673f7af54ca7b81e289985edc6cd864e7d05e0d133c
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     commands:
       - npm install
       - npm run lint
   - name: build
-    image: node:20.12.2@sha256:844b41cf784f66d7920fd673f7af54ca7b81e289985edc6cd864e7d05e0d133c
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     environment:
       NODE_OPTIONS: '--openssl-legacy-provider'
     commands:
@@ -39,7 +39,7 @@ depends_on:
 
 steps:
   - name: build
-    image: node:20.12.2@sha256:844b41cf784f66d7920fd673f7af54ca7b81e289985edc6cd864e7d05e0d133c
+    image: node:20.12.2@sha256:3864be2201676a715cf240cfc17aec1d62459f92a7cbe7d32d1675e226e736c9
     environment:
       NODE_OPTIONS: '--openssl-legacy-provider'
     commands:
@@ -57,6 +57,6 @@ steps:
       recursive: true
 ---
 kind: signature
-hmac: c3a0f95e44c6b1fd4e1de228a3c9a55f9edb5e189deb728b681bd7dc55b39565
+hmac: ecdbe7caaffba17813b29689a57849255bc20133c15f51c5d5184068c9c81924
 
 ...
diff --git a/renovate.json b/renovate.json
index ea58461..c92ecc9 100644
--- a/renovate.json
+++ b/renovate.json
@@ -6,5 +6,11 @@
     ":prHourlyLimitNone",
     ":prConcurrentLimitNone",
     ":separateMultipleMajorReleases"
+  ],
+  "packageRules": [
+    {
+      "matchFileNames": [".drone.yml"],
+      "schedule": ["before 9am on the first day of the month"]
+    }
   ]
 }