diff --git a/Dockerfile b/Dockerfile
index c2933ee..4a2581b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,15 @@
-ARG ARGOCD_VERSION="v2.13.0"
-FROM quay.io/argoproj/argocd:$ARGOCD_VERSION
+FROM quay.io/argoproj/argocd:v2.13.0
 
+# renovate: datasource=github-releases depName=sops packageName=getsops/sops
 ARG SOPS_VERSION="3.9.1"
+# renovate: datasource=github-releases depName=vals packageName=helmfile/vals
 ARG VALS_VERSION="0.37.6"
+# renovate: datasource=github-releases depName=helm-secrets packageName=jkroepke/helm-secrets
 ARG HELM_SECRETS_VERSION="4.6.2"
+
 ARG ARGOCD_USER_ID="999"
-# vals or sops
+
+# set Vals
 ENV HELM_SECRETS_BACKEND="vals" \
     HELM_SECRETS_HELM_PATH=/usr/local/bin/helm \
     HELM_PLUGINS="/home/argocd/.local/share/helm/plugins/" \
diff --git a/renovate.json b/renovate.json
index 9385014..96c638b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -7,4 +7,14 @@
     "group:allNonMajor"
   ],
   "prHourlyLimit": 0
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Update _VERSION variables in Dockerfiles",
+      "fileMatch": ["(^|/|\\.)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>[a-z-]+?)(?: depName=(?<depName>.+?))? packageName=(?<packageName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)\\s"
+      ]
+    }
+  ]
 }