diff --git a/.renovaterc.json5 b/.renovaterc.json5
index 4b39d79..e83487c 100644
--- a/.renovaterc.json5
+++ b/.renovaterc.json5
@@ -2,10 +2,23 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "commitMessageExtra": "",
   "commitMessageLowerCase": "never",
-  "extends": ["security:only-security-updates"],
+  "extends": [
+    "security:only-security-updates"
+  ],
+  "packageRules": [
+    {
+      // Major updates must be approved on the dependency dashboard
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "dependencyDashboardApproval": true
+    }
+  ],
   "vulnerabilityAlerts": {
-    "addLabels": ["security"],
+    "addLabels": [
+      "security"
+    ],
     "commitMessagePrefix": "fix(deps): ",
     "rangeStrategy": "auto"
   }
-}
+}
\ No newline at end of file