diff --git a/.github/renovate.json b/.github/renovate.json
deleted file mode 100644
index f9a8f13..0000000
--- a/.github/renovate.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "branchPrefix": "users/renovate/",
-  "extends": [
-    "config:recommended",
-    ":maintainLockFilesWeekly",
-    ":automergePatch",
-    "schedule:automergeDaily",
-    "helpers:pinGitHubActionDigestsToSemver"
-  ]
-}
diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000..4077f7d
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "branchPrefix": "users/renovate/",
+  "extends": [
+    "config:recommended",
+    ":maintainLockFilesWeekly",
+    ":automergePatch",
+    "schedule:automergeDaily",
+    "helpers:pinGitHubActionDigestsToSemver",
+    ":enableVulnerabilityAlerts"
+  ],
+  "packageRules": [
+    {
+      // Do not update Python packages when new versions are released. Instead,
+      // let lock file maintenance update them once a week.
+      "enabled": false,
+      "matchCategories": ["python"]
+    }
+  ],
+  "osvVulnerabilityAlerts": true
+}
\ No newline at end of file