diff --git a/.github/renovate.json b/.github/renovate.json
index 45dc27f..280a172 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,57 +1,88 @@
 {
-    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": [
-        "config:recommended"
-    ],
-    "branchPrefix": "grafanarenovatebot/",
-    "username": "GrafanaRenovateBot",
-    "gitAuthor": "GrafanaRenovateBot <renovategrafana@grafana.com>",
-    "platformCommit": true,
-    "dependencyDashboard": false,
-    "platform": "github",
-    "forkProcessing": "enabled",
-    "repositories": [
-        "grafana/docker-otel-lgtm"
-    ],
-    "packageRules": [
-        {
-            "matchUpdateTypes": [
-                "major"
-            ],
-            "labels": [
-                "update-major"
-            ]
-        },
-        {
-            "matchUpdateTypes": [
-                "minor"
-            ],
-            "labels": [
-                "update-minor"
-            ]
-        },
-        {
-            "matchUpdateTypes": [
-                "patch"
-            ],
-            "labels": [
-                "automerge-patch"
-            ]
-        },
-        {
-            "matchUpdateTypes": [
-                "digest"
-            ],
-            "labels": [
-                "update-digest"
-            ]
-        }
-    ],
-    "vulnerabilityAlerts": {
-        "enabled": true,
-        "labels": [
-            "automerge-security-update"
-        ]
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "branchPrefix": "grafanarenovatebot/",
+  "username": "GrafanaRenovateBot",
+  "gitAuthor": "GrafanaRenovateBot <renovategrafana@grafana.com>",
+  "platformCommit": true,
+  "dependencyDashboard": false,
+  "platform": "github",
+  "forkProcessing": "enabled",
+  "repositories": [
+    "grafana/docker-otel-lgtm"
+  ],
+  "packageRules": [
+    {
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "labels": [
+        "update-major"
+      ]
     },
-    "osvVulnerabilityAlerts": true
+    {
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "labels": [
+        "update-minor"
+      ]
+    },
+    {
+      "matchUpdateTypes": [
+        "patch"
+      ],
+      "labels": [
+        "automerge-patch"
+      ]
+    },
+    {
+      "matchUpdateTypes": [
+        "digest"
+      ],
+      "labels": [
+        "update-digest"
+      ]
+    },
+    {
+      "matchPackageNames": [
+        "open-telemetry/opentelemetry-collector-releases"
+      ],
+      "allowedVersions": "!/cmd/"
+    },
+    {
+      "matchPackageNames": [
+        "grafana/loki"
+      ],
+      "allowedVersions": "!/operator/"
+    },
+    {
+      "matchPackageNames": [
+        "grafana/tempo"
+      ],
+      "allowedVersions": "!/rc/"
+    }
+  ],
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": [
+      "automerge-security-update"
+    ]
+  },
+  "osvVulnerabilityAlerts": true,
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Update _VERSION variables in Dockerfiles",
+      "fileMatch": [
+        "(^|/|\\.)Dockerfile$",
+        "(^|/)Dockerfile\\.[^/]*$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[a-z-]+?)(?: depName=(?<depName>.+?))? packageName=(?<packageName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)\\s"
+      ]
+    }
+  ]
 }
diff --git a/docker/Dockerfile b/docker/Dockerfile
index b47ae8e..3cea9fe 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,9 +1,14 @@
 FROM redhat/ubi9
 
+# renovate: datasource=github-releases depName=grafana packageName=grafana/grafana
 ENV GRAFANA_VERSION="11.1.3"
+# renovate: datasource=github-releases depName=prometheus packageName=prometheus/prometheus
 ENV PROMETHEUS_VERSION="2.53.1"
+# renovate: datasource=github-releases depName=tempo packageName=grafana/tempo
 ENV TEMPO_VERSION="2.5.0"
+# renovate: datasource=github-releases depName=loki packageName=grafana/loki
 ENV LOKI_VERSION="3.1.0"
+# renovate: datasource=github-releases depName=opentelemetry-collector packageName=open-telemetry/opentelemetry-collector-releases
 ENV OPENTELEMETRY_COLLECTOR_VERSION="0.106.1"
 
 # TARGETARCH is automatically detected and set by the Docker daemon during the build process. If the build starts