diff --git a/renovate/default.json b/renovate/default.json
index 8e56cbf..8c68240 100644
--- a/renovate/default.json
+++ b/renovate/default.json
@@ -4,9 +4,26 @@
     "config:recommended",
     ":semanticCommits",
     ":enablePreCommit",
-    ":enableVulnerabilityAlerts"
+    ":enableVulnerabilityAlerts",
+    "helpers:pinGitHubActionDigests"
   ],
   "packageRules": [
+    {
+      "description": ["delay updates and only update weekly"],
+      "minimumReleaseAge": "5 days",
+      "minimumReleaseAgeBehavior": "timestamp-optional",
+      "schedule": ["on monday"]
+    },
+    {
+      "description": ["do not delay updates for our own packages"],
+      "matchSourceUrls": [
+        "https://github.com/hetznercloud/**",
+        "https://github.com/hetzner/**"
+      ],
+      "minimumReleaseAge": "0 seconds",
+      "minimumReleaseAgeBehavior": "timestamp-optional",
+      "schedule": ["at any time"]
+    },
     {
       "description": ["automerge pre-commit hooks minor and patch version"],
       "matchManagers": ["pre-commit"],
@@ -23,11 +40,6 @@
       "description": ["automerge patch version"],
       "updateTypes": ["patch"],
       "automerge": true
-    },
-    {
-      "description": ["cert-manager releases are spread over a long time"],
-      "matchDepNames": ["cert-manager", "github.com/cert-manager/cert-manager"],
-      "minimumReleaseAge": "2 days"
     }
   ],
   "customManagers": [