diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 64174e037a..d75df4179e 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -17,6 +17,9 @@
     // This tells Renovate to combine all updates in one PR so that we have fewer PRs to deal with.
     "group:all",
   ],
+  // Automerge all rpm-lockfile security updates. This is configured separately from other package managers.
+  // https://konflux-ci.dev/docs/mintmaker/rpm-lockfile/#how-to-enable-automerge-for-rpm-security-updates
+  "rpmVulnerabilityAutomerge": "ALL",
   "timezone": "Etc/UTC",
   "schedule": [
     // Allowed syntax: https://docs.renovatebot.com/configuration-options/#schedule