diff --git a/.github/renovate.json b/.github/renovate.json
index e3eb531c6e..93272c5a91 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,5 +1,9 @@
 {
   "packageRules": [
+    {
+      "matchManagers": ["npm"],
+      "addLabels": ["javascript"]
+    },
     {
       "matchDepTypes": ["devDependencies"],
       "groupName": "development dependencies",
@@ -12,6 +16,7 @@
     },
     {
       "matchDepTypes": ["action"],
+      "addLabels": ["github_actions"],
       "groupName": "CI dependencies",
       "groupSlug": "ci-deps"
     },
@@ -21,6 +26,9 @@
       "enabled": false
     }
   ],
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "dependencyDashboard": false,
   "ignoreDeps": ["npm", "node"],
   "lockFileMaintenance": {
@@ -28,6 +36,7 @@
   },
   "enabledManagers": ["npm", "github-actions"],
   "labels": ["dependencies"],
-  "rebaseWhen": "behind-base-branch",
+  "prHourlyLimit": 2,
+  "rebaseWhen": "conflicted",
   "rangeStrategy": "pin"
 }