diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 2970857f1..5e5f50863 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -8,12 +8,6 @@ on:
 
 jobs:
   renovate:
-    permissions:
-      contents: read
-      issues: read
-      pull-requests: write
-      repository-projects: read
-      statuses: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -22,6 +16,8 @@ jobs:
         uses: renovatebot/github-action@v40.1.12
         with:
           configurationFile: renovate-config.json
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.PCCIBOT_PAT_REPO_PUBLIC_REPO }}
+          renovate-image: ghcr.io/renovatebot/renovate
+          renovate-version: 37-full
     env:
       LOG_LEVEL: 'debug'
diff --git a/renovate-config.json b/renovate-config.json
index f9eedf52f..e1a13f3e4 100644
--- a/renovate-config.json
+++ b/renovate-config.json
@@ -2,15 +2,24 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "onboarding": false,
   "requireConfig": "optional",
-  "repositories": ["voxpupuli/puppet-prometheus"],
-  "extends": ["config:recommended"],
-  "enabledManagers": ["custom.regex"],
+  "repositories": [
+    "voxpupuli/puppet-prometheus"
+  ],
+  "extends": [
+    "config:recommended"
+  ],
+  "enabledManagers": [
+    "custom.regex"
+  ],
   "prHourlyLimit": 10,
   "prConcurrentLimit": 20,
+  "branchConcurrentLimit": 30,
   "customManagers": [
     {
       "customType": "regex",
-      "fileMatch": ["defaults.yaml"],
+      "fileMatch": [
+        "defaults.yaml"
+      ],
       "matchStrings": [
         "# renovate: depName=(?<depName>[^\\s]+?)\\s+[a-z0-9:_]+?::version:\\s+['\"]?(?<currentValue>[\\w+\\.]*)"
       ],
@@ -18,12 +27,26 @@
     },
     {
       "customType": "regex",
-      "fileMatch": [".*_exporter.pp"],
+      "fileMatch": [
+        ".*_exporter.pp"
+      ],
       "matchStrings": [
         "# renovate: depName=(?<depName>[^\\s]+?)\\s+String\\[1\\]\\s+\\$version\\s+=\\s+['\"]?(?<currentValue>[\\w+\\.]*)"
       ],
       "datasourceTemplate": "github-releases"
     }
-
+  ],
+  "postUpgradeTasks": {
+    "commands": [
+      "bundle install",
+      "bundle exec gem install rake",
+      "bundle exec rake strings:generate:reference"
+      ],
+    "executionMode": "branch"
+  },
+  "allowedPostUpgradeCommands": [
+    "^bundle install$",
+    "^bundle exec gem install rake$",
+    "^bundle exec rake strings:generate:reference$"
   ]
 }