diff --git a/.github/renovate-pr.json5 b/.github/renovate-pr.json5
index be3d4e781..a79ac54cd 100644
--- a/.github/renovate-pr.json5
+++ b/.github/renovate-pr.json5
@@ -8,36 +8,6 @@
       transformTemplates: ['{"releases":[{"version": $string(revision)}]}'],
     },
   },
-  // Keep the extends started with ":" at the end of the list to allow overriding
-  extends: [
-    "config:recommended",
-    "docker:pinDigests",
-    "helpers:pinGitHubActionDigestsToSemver",
-    "security:openssf-scorecard",
-    ":disableDependencyDashboard",
-    ":disableRateLimiting",
-    ":docker",
-    ":enableVulnerabilityAlertsWithLabel(security)",
-    ":pinSkipCi",
-  ],
-  // ignore chirpy dependencies
-  // https://renovatebot.com/docs/configuration-options/#ignoredeps
-  labels: [
-    "renovate-pr",
-    "renovate-pr/{{replace '.*/' '' depName}}",
-    "renovate-pr/{{updateType}}",
-  ],
-  packageRules: [
-    {
-      automerge: true,
-      commitBody: "[skip ci]",
-      description: "Automerge all without running any tests",
-      ignoreTests: true,
-      matchPackagePatterns: ["*"],
-    },
-  ],
-  prBodyTemplate: "{{{table}}}{{{notes}}}{{{changelogs}}}",
-  rebaseWhen: "behind-base-branch",
   customManagers: [
     {
       customType: "regex",
@@ -68,4 +38,28 @@
       ],
     },
   ],
+  // Keep the extends started with ":" at the end of the list to allow overriding
+  extends: [
+    "config:recommended",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigestsToSemver",
+    "security:openssf-scorecard",
+    ":disableDependencyDashboard",
+    ":disableRateLimiting",
+    ":docker",
+    ":enableVulnerabilityAlertsWithLabel(security)",
+    ":pinSkipCi",
+  ],
+  packageRules: [
+    {
+      automerge: true,
+      commitBody: "[skip ci]",
+      description: "Automerge all without running any tests",
+      ignoreTests: true,
+      matchPackagePatterns: ["*"],
+    },
+  ],
+  prConcurrentLimit: 100,
+  prHourlyLimit: 100,
+  prCommitsPerRunLimit: 100,
 }
diff --git a/_posts/2024/2024-12-14-secure-cheap-amazon-eks-auto.md b/_posts/2024/2024-12-14-secure-cheap-amazon-eks-auto.md
index 21cbfebaa..e9e06f0fc 100644
--- a/_posts/2024/2024-12-14-secure-cheap-amazon-eks-auto.md
+++ b/_posts/2024/2024-12-14-secure-cheap-amazon-eks-auto.md
@@ -681,7 +681,7 @@ grafana:
       15757-kubernetes-views-global:
         # renovate: depName="Kubernetes / Views / Global"
         gnetId: 15757
-        revision: 37
+        revision: 42
         datasource: Prometheus
       15758-kubernetes-views-namespaces:
         # renovate: depName="Kubernetes / Views / Namespaces"
@@ -696,12 +696,12 @@ grafana:
       15761-kubernetes-system-api-server:
         # renovate: depName="Kubernetes / System / API Server"
         gnetId: 15761
-        revision: 16
+        revision: 18
         datasource: Prometheus
       15762-kubernetes-system-coredns:
         # renovate: depName="Kubernetes / System / CoreDNS"
         gnetId: 15762
-        revision: 18
+        revision: 19
         datasource: Prometheus
       19105-prometheus:
         # renovate: depName="Prometheus"
@@ -982,7 +982,7 @@ proxy and load balancer.
 Install `ingress-nginx`
 [helm chart](https://artifacthub.io/packages/helm/ingress-nginx/ingress-nginx)
 and modify the
-[default values](https://github.com/kubernetes/ingress-nginx/blob/helm-chart-4.10.1/charts/ingress-nginx/values.yaml).
+[default values](https://github.com/kubernetes/ingress-nginx/blob/helm-chart-4.11.3/charts/ingress-nginx/values.yaml).
 
 ```bash
 # renovate: datasource=helm depName=ingress-nginx registryUrl=https://kubernetes.github.io/ingress-nginx
@@ -1059,7 +1059,7 @@ on Kubernetes.
 Install `forecastle`
 [helm chart](https://artifacthub.io/packages/helm/stakater/forecastle)
 and modify the
-[default values](https://github.com/stakater/Forecastle/blob/v1.0.139/deployments/kubernetes/chart/forecastle/values.yaml).
+[default values](https://github.com/stakater/Forecastle/blob/v1.0.152/deployments/kubernetes/chart/forecastle/values.yaml).
 
 ```bash
 # renovate: datasource=helm depName=forecastle registryUrl=https://stakater.github.io/stakater-charts
@@ -1107,11 +1107,11 @@ the endpoints by Google Authentication.
 Install `oauth2-proxy`
 [helm chart](https://artifacthub.io/packages/helm/oauth2-proxy/oauth2-proxy)
 and modify the
-[default values](https://github.com/oauth2-proxy/manifests/blob/oauth2-proxy-7.5.3/helm/oauth2-proxy/values.yaml).
+[default values](https://github.com/oauth2-proxy/manifests/blob/oauth2-proxy-7.8.2/helm/oauth2-proxy/values.yaml).
 
 ```bash
 # renovate: datasource=helm depName=oauth2-proxy registryUrl=https://oauth2-proxy.github.io/manifests
-OAUTH2_PROXY_HELM_CHART_VERSION="7.7.1"
+OAUTH2_PROXY_HELM_CHART_VERSION="7.8.2"
 
 helm repo add oauth2-proxy https://oauth2-proxy.github.io/manifests
 cat > "${TMP_DIR}/${CLUSTER_FQDN}/helm_values-oauth2-proxy.yml" << EOF