diff --git a/renovate.json5 b/renovate.json5
index 8fcebe5e3e5..23731821e21 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -7,12 +7,50 @@
     ":maintainLockFilesWeekly",
     ":separateMultipleMajorReleases",
     ":semanticCommits",
-    ":label(dependencies)"
+    ":label(dependencies)",
+    ":configMigration",
+    ":combinePatchMinorReleases",
+    "npm:unpublishSafe",
+    "preview:dockerVersions",
+    "schedule:daily", // daily, before 4am
+    "group:unitTestNonMajor",
+    ":enableVulnerabilityAlerts",
   ],
+  "vulnerabilityAlerts": {
+    "enabled": true
+  },
+  "osvVulnerabilityAlerts": true,
   "packageRules": [
     {
       "matchPackageNames": ["uv", "ghcr.io/astral-sh/uv"],
       "schedule": ["before 4am on Wednesday"]
+    },
+    {
+      "groupName": "Roslynator",
+      "matchSourceUrls": [
+        "https://github.com/dotnet/roslynator"
+      ],
+      "matchUpdateTypes": [
+        "digest",
+        "patch",
+        "minor",
+        "major"
+      ]
+    },
+    {
+      "groupName": "Salesforce packages",
+      "matchPackageNames": [
+        "@salesforce/**"
+      ],
+      "schedule": [
+        "before 4am every 4 days"
+      ],
+      "matchUpdateTypes": [
+        "digest",
+        "patch",
+        "minor",
+        "major"
+      ]
     }
   ],
   "customManagers": [