diff --git a/.github/renovate.json5 b/.github/renovate.json5
index db37c6ec152..3421abe792e 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,23 +1,22 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base",
+    "config:best-practices",
     "schedule:earlyMondays",
     "group:allNonMajor",
-    ":prHourlyLimitNone",
-    "helpers:pinGitHubActionDigests"
+    ":prHourlyLimitNone"
   ],
-  "labels": ["c: dependencies"],
+  "labels": ["c: dependencies", "p: 1-normal"],
   "lockFileMaintenance": {
     "enabled": true
   },
+  "milestone": 15,
   "reviewersFromCodeOwners": true,
-  "rangeStrategy": "bump",
+  "rangeStrategy": "pin",
   "packageRules": [
     {
       "groupName": "devDependencies",
-      "matchDepTypes": ["devDependencies"],
-      "rangeStrategy": "bump"
+      "matchDepTypes": ["devDependencies"]
     },
     {
       "groupName": "dependencies",
@@ -35,12 +34,16 @@
       "rangeStrategy": "replace"
     },
     {
-      "groupName": "typescript-eslint",
-      "matchPackagePrefixes": ["@typescript-eslint/"]
+      "groupName": "eslint",
+      "matchPackagePrefixes": [
+        "@typescript-eslint/",
+        "@eslint-types/",
+        "eslint"
+      ]
     },
     {
       "groupName": "vitest",
-      "matchPackageNames": ["@vitest/coverage-v8", "@vitest/ui", "vitest"]
+      "matchPackagePrefixes": ["@vitest/", "vitest"]
     },
     {
       "groupName": "prettier",
@@ -61,7 +64,7 @@
     }
   ],
   "vulnerabilityAlerts": {
-    "labels": ["c: security"],
+    "labels": ["c: security", "p: 2-high"],
     "assignees": ["team:maintainers"]
   }
 }