diff --git a/renovate.json b/renovate.json
index 72b7b43..6c4cbd3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,4 +1,17 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>AtvikSecurity/renovate-config"]
+  "extends": [
+    "local>AtvikSecurity/renovate-config"
+  ],
+  "packageRules": [
+    {
+      "description": "Auto-merge patch + digest updates after a 3-day soak",
+      "matchUpdateTypes": [
+        "patch",
+        "digest"
+      ],
+      "minimumReleaseAge": "3 days",
+      "automerge": true
+    }
+  ]
 }