diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 00000000..377cc593
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,24 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "pinDigests": true,
+  "prConcurrentLimit": 0,
+  "branchConcurrentLimit": 0,
+  "prHourlyLimit": 0,
+  "customManagers": [
+    {
+      "customType": "regex",
+      "managerFilePatterns": [
+        "trino-aws-proxy/src/test/java/io/trino/aws/proxy/server/testing/containers/S3Container.java"
+      ],
+      "matchStrings": [
+        "cgr\\.dev/chainguard/minio@(?<currentDigest>sha256:[a-f0-9]+)"
+      ],
+      "depNameTemplate": "cgr.dev/chainguard/minio",
+      "datasourceTemplate": "docker",
+      "currentValueTemplate": "latest"
+    }
+  ]
+}
diff --git a/pom.xml b/pom.xml
index 22264360..e08ba76b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
         <dep.testcontainers.version>1.19.8</dep.testcontainers.version>
         <!-- in sync with container cgr.dev/chainguard/minio in S3Container -->
         <dep.minio.version>8.6.0</dep.minio.version>
-        <dep.docker.version>3.3.6</dep.docker.version>
+        <dep.docker.version>3.7.1</dep.docker.version>
         <dep.awaitility.version>4.1.1</dep.awaitility.version>
         <dep.caffeine.version>3.1.8</dep.caffeine.version>
     </properties>