diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml
index 8548d4c720..6cf1a5d76d 100644
--- a/.forgejo/workflows/renovate.yml
+++ b/.forgejo/workflows/renovate.yml
@@ -20,7 +20,7 @@ jobs:
       image: 'ghcr.io/visualon/renovate:37.269.3@sha256:4fb1684ec9e10592b6c4726906d353f88097fbb584748150043949a5aa5ca085'
 
     steps:
-      - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+      - uses: https://code.forgejo.org/actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: |
             .tmp/cache/renovate/repository
@@ -46,7 +46,7 @@ jobs:
 
       - name: Save renovate repo cache
         if: always() && env.RENOVATE_DRY_RUN == 'true'
-        uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+        uses: https://code.forgejo.org/actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
         with:
           path: |
             .tmp/cache/renovate/repository
diff --git a/renovate.json b/renovate.json
index 74d468e6c0..364a15d420 100644
--- a/renovate.json
+++ b/renovate.json
@@ -3,6 +3,7 @@
   "extends": ["config:best-practices", ":approveMajorUpdates"],
   "ignorePresets": [":semanticPrefixFixDepsChoreOthers"],
   "semanticCommits": "disabled",
+  "postUpdateOptions": ["gomodUpdateImportPaths", "npmDedupe"],
   "packageRules": [
     {
       "description": "Require approval for go and python minor version",
@@ -22,25 +23,20 @@
       "matchDatasources": ["docker"],
       "matchDepNames": ["ghcr.io/visualon/renovate"],
       "extends": ["schedule:daily"]
+    },
+    {
+      "description": "Disable actions/cascading-pr for now <https://github.com/renovatebot/renovate/issues/28120>",
+      "matchDepNames": ["actions/cascading-pr"],
+      "matchManagers": ["github-actions"],
+      "enabled": false
     }
   ],
   "customManagers": [
-    {
-      "description": "Update docker images in forgejo workflows",
-      "customType": "regex",
-      "fileMatch": ["^.forgejo/workflows/.+\\.yml$"],
-      "matchStrings": [
-        "\\s+image:\\s+['\"]?(?<depName>.+?):(?<currentValue>.+?)['\"]?\\s"
-      ],
-      "datasourceTemplate": "docker"
-    },
     {
       "description": "Update go-version in forgejo workflows",
       "customType": "regex",
       "fileMatch": ["^.forgejo/workflows/.+\\.yml$"],
-      "matchStrings": [
-        "\\s+go-version: ['\"]?(?<currentValue>.+?)['\"]?\\s"
-      ],
+      "matchStrings": ["\\s+go-version: ['\"]?(?<currentValue>.+?)['\"]?\\s"],
       "depNameTemplate": "go",
       "datasourceTemplate": "golang-version",
       "versioningTemplate": "go-mod-directive"