diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 000000000..5f131b0b9
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,12 @@
+{
+  "branchPrefix": "foreman-renovate/",
+  "onboarding": false,
+  "platform": "github",
+  "prHourlyLimit": 10,
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions", "bundler", "pip_requirements"],
+      "enabled": false
+    }
+  ]
+}
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 000000000..d2c7e4d9e
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,20 @@
+name: Renovate
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '4 3 * * *'
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Self-hosted Renovate
+        uses: renovatebot/github-action@v39.1.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+        env:
+          RENOVATE_REPOSITORIES: ${{ github.repository }}
+          LOG_LEVEL: 'debug'
diff --git a/puppet/Puppetfile b/puppet/Puppetfile
index 7013a6d1c..6537e31dd 100644
--- a/puppet/Puppetfile
+++ b/puppet/Puppetfile
@@ -10,7 +10,7 @@ mod 'puppet/augeasproviders_shellvar', '6.0.0'
 mod 'puppet/augeasproviders_ssh', '6.0.0'
 mod 'puppet/chrony', '3.0.0'
 mod 'puppet/epel', '5.0.0'
-mod 'puppet/extlib', '6.2.0'
+mod 'puppet/extlib', '7.0.0'
 mod 'puppet/jenkins', '4.0.0'
 mod 'puppet/letsencrypt', '10.0.0'
 mod 'puppet/mosquitto', '1.2.0'