diff --git a/.github/renovate-entrypoint.sh b/.github/renovate-entrypoint.sh
new file mode 100644
index 0000000..faa8211
--- /dev/null
+++ b/.github/renovate-entrypoint.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+set -e
+
+echo "=== Starting Renovate Bot ==="
+
+apt update
+apt install -y build-essential libpq-dev
+
+runuser -u ubuntu renovate --platform=github
+
+echo "=== Renovate Bot finished ==="
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 0000000..8eab065
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,24 @@
+name: Renovate
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 2 * * 1'
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  renovate:
+    runs-on: self-hosted
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Run Self-Hosted Renovate
+        uses: renovatebot/github-action@v43.0.12
+        with:
+          docker-cmd-file: .github/renovate-entrypoint.sh
+          docker-user: root
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..66368f2
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,14 @@
+{
+  "extends": ["config:base"],
+  "labels": ["dependencies", "renovate"],
+  "packageRules": [
+    {
+      "managers": ["pip_requirements"],
+      "updateTypes": ["minor", "patch"],
+      "automerge": false,
+      "groupName": "Python dependencies"
+    }
+  ],
+  "prConcurrentLimit": 5,
+  "prHourlyLimit": 2
+}