diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 00000000..2fcf99f1
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,40 @@
+name: Run Renovate
+
+on:
+  workflow_dispatch
+  #schedule:
+  #  - cron: "13 * * * *"
+
+jobs:
+  renovate:
+    runs-on: antville
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Renovate
+        run: npx renovate
+        env:
+          # Renovate is using this token to retrieve release notes
+          GITHUB_COM_TOKEN: ${{ secrets.renovate_github_com_token }}
+          # See <https://docs.renovatebot.com/troubleshooting/#log-debug-levels>
+          LOG_LEVEL: info # debug | info | warn | error | fatal
+          RENOVATE_AUTODISCOVER: 'true'
+          RENOVATE_CONFIG_FILE: renovate.json
+          RENOVATE_ENDPOINT: ${{ github.api_url }}
+          RENOVATE_GIT_AUTHOR: Renovate Bot <mail+renovate@antville.org>
+          #RENOVATE_GIT_IGNORED_AUTHORS: 
+          #  - 29139614+renovate[bot]@users.noreply.github.com
+          RENOVATE_IGNORE_PR_AUTHOR: 'true'
+          RENOVATE_LOG_FILE: renovate-log.ndjson
+          RENOVATE_LOG_FILE_LEVEL: debug
+          RENOVATE_PLATFORM: gitea
+          RENOVATE_REPOSITORY_CACHE: 'enabled'
+          # github.token is not working here, it lacks some permissions required by Renovate
+          RENOVATE_TOKEN: ${{ secrets.renovate_token }} #${{ github.token }}
+
+      - name: Save log file
+        uses: actions/upload-artifact@v3
+        with:
+          name: renovate-log.ndjson
+          path: renovate-log.ndjson