diff --git a/.github/renovate.json b/.github/renovate.json
index 9889f97..ead302c 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -51,11 +51,6 @@
       "matchManagers": [
         "github-actions"
       ],
-      "matchPackagePatterns": [
-        "^actions/checkout",
-        "^1password/",
-        "^tailscale/github-action"
-      ],
       "matchUpdateTypes": [
         "patch"
       ],
@@ -65,6 +60,11 @@
         "security",
         "dependencies",
         "review-required"
+      ],
+      "matchPackageNames": [
+        "/^actions/checkout/",
+        "/^1password//",
+        "/^tailscale/github-action/"
       ]
     }
   ]