diff --git a/.github/renovate.json5 b/.github/renovate.json5
index c0aaa7414fc1..748e1880830e 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -96,5 +96,10 @@
       enabled: false,
       matchDepNames: ['ol-cesium'],
     },
+    /** For security reason don't takes the too early packages on stabilization branches */
+    {
+      matchBaseBranches: ['/^[0-9]+\\.[0-9]+$/'],
+      minimumReleaseAge: '7 days',
+    },
   ],
 }
diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 09be3ee12d68..62eae7f4f74a 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -63,8 +63,3 @@ jobs:
         uses: andstor/file-existence-action@v3
         with:
           files: ci/dpkg-versions.yaml
-      - name: Update dpkg packages versions
-        run: ~/.venv/bin/c2cciutils-docker-versions-update --branch=${{ matrix.branch }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
-        if: steps.dpkg-versions.outputs.files_exists == 'true'
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 28efbca98471..e47a0921aa69 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,12 +1,5 @@
 # https://pre-commit.com/hooks.html
 
-ci:
-  autoupdate_schedule: quarterly
-  skip:
-    - copyright
-    - ripsecrets
-    - jsonschema-validator
-
 exclude: ^src/bootstrap-custom\.css\.map$
 
 repos:
@@ -142,3 +135,7 @@ repos:
     hooks:
       - id: jsonschema-validator
         files: ^ci/config\.yaml$
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 37.428.1
+    hooks:
+      - id: renovate-config-validator