diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..45dc27f
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,57 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        "config:recommended"
+    ],
+    "branchPrefix": "grafanarenovatebot/",
+    "username": "GrafanaRenovateBot",
+    "gitAuthor": "GrafanaRenovateBot <renovategrafana@grafana.com>",
+    "platformCommit": true,
+    "dependencyDashboard": false,
+    "platform": "github",
+    "forkProcessing": "enabled",
+    "repositories": [
+        "grafana/docker-otel-lgtm"
+    ],
+    "packageRules": [
+        {
+            "matchUpdateTypes": [
+                "major"
+            ],
+            "labels": [
+                "update-major"
+            ]
+        },
+        {
+            "matchUpdateTypes": [
+                "minor"
+            ],
+            "labels": [
+                "update-minor"
+            ]
+        },
+        {
+            "matchUpdateTypes": [
+                "patch"
+            ],
+            "labels": [
+                "automerge-patch"
+            ]
+        },
+        {
+            "matchUpdateTypes": [
+                "digest"
+            ],
+            "labels": [
+                "update-digest"
+            ]
+        }
+    ],
+    "vulnerabilityAlerts": {
+        "enabled": true,
+        "labels": [
+            "automerge-security-update"
+        ]
+    },
+    "osvVulnerabilityAlerts": true
+}
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 0000000..731d870
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,26 @@
+name: Renovate
+on:
+  schedule:
+    - cron:  '0 */4 * * *'
+jobs:
+  renovate:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+      - name: Generate token
+        id: generate-token
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a #v2.1.0
+        with:
+          revoke: true
+          app_id: ${{ secrets.RENOVATEGRAFANABOT_ID }}
+          private_key: ${{ secrets.RENOVATEGRAFANABOT_PEM }}
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v39.0.5 #v.39.0.5
+        with:
+          renovate-version: 37.5.3@sha256:613fe86ea2730c062a42bf097a02563e35cb0d8df4fef08d2c4e50b8cd2ccdbc
+          configurationFile: .github/renovate.json
+          token: '${{ steps.generate-token.outputs.token }}'