diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b41e08c..56b1fcb 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -33,11 +33,13 @@ jobs:
     strategy:
       matrix:
         release:
+          # renovate: datasource=github-releases depName=owncloud/ocis versioning=semver
           - version: "7.3.2"
             dir: "v7"
             extra-tags: |
               7.3
               7
+          # renovate: datasource=github-releases depName=owncloud/ocis versioning=semver
           - version: "8.0.1"
             dir: "v8"
             extra-tags: |
diff --git a/.renovaterc.json b/.renovaterc.json
index be4b776..89bc8c8 100644
--- a/.renovaterc.json
+++ b/.renovaterc.json
@@ -1,4 +1,29 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>owncloud-ops/renovate-presets:docker"]
+  "extends": ["github>owncloud-ops/renovate-presets:docker"],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": ["^\\.github/workflows/main\\.yml$"],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+) versioning=(?<versioning>\\S+)\\n\\s+- version: \"(?<currentValue>[^\"]+)\""
+      ]
+    }
+  ],
+  "packageRules": [
+    {
+      "description": "Constrain ocis v7 matrix entry to 7.x only",
+      "matchDatasources": ["github-releases"],
+      "matchPackageNames": ["owncloud/ocis"],
+      "matchCurrentVersion": "^7",
+      "allowedVersions": "^7"
+    },
+    {
+      "description": "Constrain ocis v8 matrix entry to 8.x only",
+      "matchDatasources": ["github-releases"],
+      "matchPackageNames": ["owncloud/ocis"],
+      "matchCurrentVersion": "^8",
+      "allowedVersions": "^8"
+    }
+  ]
 }