diff --git a/Dockerfile b/Dockerfile
index 25ee094..ba980ca 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,15 +1,14 @@
 # the following version can be overridden at image build time with --build-arg
+# renovate: datasource=github-releases depName=gohugoio/hugo
 ARG HUGO_VERSION=0.111.3
+
 # remove/comment the following line completely to compile vanilla Hugo:
 ARG HUGO_BUILD_TAGS=extended
 
-# Hugo >= v0.81.0 requires Go 1.16+ to build
-ARG GO_VERSION=1.19
-ARG ALPINE_VERSION=3.17
-
 # ---
 
-FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS build
+# Hugo >= v0.81.0 requires Go 1.16+ to build
+FROM golang:1.19-alpine3.17 AS build
 
 # renew global args from above
 # https://docs.docker.com/engine/reference/builder/#scope
@@ -48,14 +47,16 @@ RUN go install github.com/yaegashi/muslstack@latest && \
 
 # ---
 
-FROM alpine:${ALPINE_VERSION}
+FROM alpine:3.17
 
 # renew global args from above & pin any dependency versions
 ARG HUGO_VERSION
 # https://github.com/jgm/pandoc/releases
+# renovate: datasource=github-releases depName=jgm/pandoc
 ARG PANDOC_VERSION=2.19.2
 # https://github.com/sass/dart-sass-embedded/releases
-ARG DART_SASS_VERSION=1.58.3
+# renovate: datasource=github-releases depName=sass/dart-sass-embedded
+ARG DART_SASS_VERSION=1.59.3
 
 LABEL version="${HUGO_VERSION}"
 LABEL repository="https://github.com/jakejarvis/hugo-docker"
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..2131c25
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,18 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base"
+  ],
+  "automerge": false,
+  "regexManagers": [
+    {
+      "fileMatch": [
+        "^Dockerfile$"
+      ],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?( registryUrl=(?<registryUrl>.*?))?\\s.*?_VERSION=(?<currentValue>.*)\\s"
+      ],
+      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}"
+    }
+  ]
+}