diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..8534adc
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,51 @@
+# Managed centrally: replaces Renovate. Security updates are enabled org-wide via GitHub code security configuration.
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directories:
+      - "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "Europe/London"
+    cooldown:
+      default-days: 7
+    open-pull-requests-limit: 5
+    groups:
+      github_actions-minor-patch:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["minor", "patch"]
+      github_actions-major:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major"]
+      github_actions-security:
+        applies-to: security-updates
+        patterns: ["*"]
+
+  - package-ecosystem: "npm"
+    directories:
+      - "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "Europe/London"
+    cooldown:
+      default-days: 7
+      semver-major-days: 30
+    open-pull-requests-limit: 5
+    groups:
+      npm-minor-patch:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["minor", "patch"]
+      npm-major:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major"]
+      npm-security:
+        applies-to: security-updates
+        patterns: ["*"]
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index a3dcbca..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended",
-    ":dependencyDashboard",
-    ":enableVulnerabilityAlerts",
-    "security:minimumReleaseAgeNpm",
-    ":maintainLockFilesWeekly"
-  ],
-  "autoApprove": true,
-  "automergeType": "pr",
-  "automerge": true,
-  "configMigration": true,
-  "labels": ["dependencies"],
-  "lockFileMaintenance": {
-    "enabled": true
-  },
-  "major": {
-    "dependencyDashboardApproval": true
-  },
-  "prConcurrentLimit": 1,
-  "prHourlyLimit": 0,
-  "rangeStrategy": "auto",
-  "rebaseWhen": "behind-base-branch",
-  "timezone": "Europe/London"
-}