diff --git a/.github/renovate-regex.json b/.github/renovate-regex.json
new file mode 100644
index 0000000..2220510
--- /dev/null
+++ b/.github/renovate-regex.json
@@ -0,0 +1,8 @@
+{
+  "jq": {
+    "renovate_datasource": "github-tags",
+    "renovate_depname": "jqlang/jq",
+    "renovate_versioning": "regex:^jq-(?<major>\d+)(\.(?<minor>\d+))?(\.(?<patch>\d+))?$",
+    "version": "jq-1.6"
+  }
+}
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..8dce2f7
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,24 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:base"],
+  "labels": ["dependencies"],
+
+  "packageRules": [
+    {
+      "enabled": true,
+      "matchManagers": ["regex"],
+      "matchUpdateTypes": ["patch", "minor"],
+      "automerge": true
+    }
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": ["renovate-regex.json$"],
+      "matchStrings": [
+        "\"renovate_datasource\": \"(?<datasource>.*?)\",\\s    \"renovate_depname\": \"(?<depName>.*?)\",\\s(    \"renovate_versioning\": \"(?<versioning>.*?)\",\\s)?(    \"sha256\": \"(?<currentDigest>.*?)\",\\s)?    \"version\": \"(?<currentValue>.*?)\""
+      ],
+      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
+    }
+  ],
+  "reviewers": ["@bazel_rules_jq-maintainers"]
+}
diff --git a/.prettierignore b/.prettierignore
index dddb06f..d3adb26 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,3 +1,5 @@
 docs/repositories.md
 docs/rules.md
 docs/toolchain.md
+# whitespace matters: a regex is used to parse and automatically update this json
+.github/renovate-regex.json