diff --git a/renovate.json b/renovate.json
index 029dcd27c6..a321b4c1ba 100644
--- a/renovate.json
+++ b/renovate.json
@@ -7,28 +7,29 @@
     "uv.lock",
     "scripts/split_tox_gh_actions/templates/test_group.jinja",
     "scripts/split_tox_gh_actions/templates/test_orchestrator.jinja",
-    ".github/workflows/test.yml",
-    ".github/workflows/test-integrations-*.yml"
+    ".github/workflows/*.yml"
   ],
   "lockFileMaintenance": {
     "enabled": true
   },
   "packageRules": [
     {
-      "description": "Group package updates.",
+      "description": "Disable pyproject.toml version updates.",
       "matchManagers": ["pep621"],
-      "groupName": "Packages",
-      "groupSlug": "packages",
-      "separateMajorMinor": false,
-      "separateMinorPatch": false,
-      "separateMultipleMajor": false
+      "matchUpdateTypes": ["major", "minor", "patch", "pin"],
+      "enabled": false
     },
     {
-      "description": "Group GitHub Actions updates.",
+      "description": "Disable Ubuntu image updates.",
+      "matchManagers": ["github-actions"],
+      "matchDatasources": ["github-runners"],
+      "enabled": false
+    },
+    {
+      "description": "Group GitHub workflow updates.",
       "matchManagers": ["custom.regex", "github-actions"],
-      "matchDatasources": ["github-tags"],
-      "groupName": "GitHub Actions",
-      "groupSlug": "github-actions",
+      "groupName": "GitHub Workflows",
+      "groupSlug": "github-workflows",
       "separateMajorMinor": false,
       "separateMinorPatch": false,
       "separateMultipleMajor": false
@@ -37,16 +38,29 @@
   "customManagers": [
     {
       "customType": "regex",
-      "description": "Update GitHub Actions in test_group.jinja",
+      "description": "Update GitHub Actions in templates.",
       "managerFilePatterns": [
         "/^scripts\\/split_tox_gh_actions\\/templates\\/(test_group|test_orchestrator)\\.jinja$/"
       ],
       "matchStrings": [
-        "(?<indent>\\s+(?:-\\s+)?uses:\\s+)(?<depName>[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+(?:\\/[A-Za-z0-9_.-]+)*)@(?<currentDigest>[a-f0-9]{40})\\s+#\\s+(?<currentValue>v?\\d+(?:\\.\\d+){0,2})"
+        "(?<depName>[A-Za-z0-9-]+\\/[A-Za-z0-9_.-]+(?:\\/[A-Za-z0-9_.-]+)*)@(?<currentDigest>[a-f0-9]{40})[ \\t]+#[ \\t]+(?<currentValue>v?\\d+(?:\\.\\d+){0,2})"
       ],
       "datasourceTemplate": "github-tags",
-      "versioningTemplate": "semver-coerced",
-      "autoReplaceStringTemplate": "{{{indent}}}{{{depName}}}@{{{newDigest}}} # {{{newValue}}}"
+      "versioningTemplate": "github-actions",
+      "autoReplaceStringTemplate": "{{{depName}}}@{{{newDigest}}} # {{{newValue}}}"
+    },
+    {
+      "customType": "regex",
+      "description": "Update Docker (some) Docker images in templates.",
+      "managerFilePatterns": [
+        "/^scripts\\/split_tox_gh_actions\\/templates\\/test_group\\.jinja$/"
+      ],
+      "matchStrings": [
+        "(?<depName>ghcr\\.io\\/getsentry\\/image-mirror-library-[a-z0-9_.-]+):(?<currentValue>[A-Za-z0-9_.-]+)"
+      ],
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "docker",
+      "autoReplaceStringTemplate": "{{{depName}}}:{{{newValue}}}"
     }
   ]
 }