diff --git a/.github/renovate.json b/.github/renovate.json
index f929484..0263121 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -4,6 +4,22 @@
     "docker:pinDigests",
     "helpers:pinGitHubActionDigests"
   ],
+  "pip_requirements": {
+    "fileMatch": ["upper-constraints.txt"]
+  },
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": [
+        "roles/defaults/vars/main\\.yml"
+      ],
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "docker",
+      "matchStrings": [
+        "  \\w+?: (?<depName>[^:\\s]*):(?<currentValue>[^:@\\s]*)@?(?<currentDigest>sha256:[a-f0-9]+)?"
+      ]
+    }
+  ],
   "packageRules": [
     {
       "enabled": false,
@@ -30,19 +46,11 @@
         "quay.io/skopeo",
         "registry.k8s.io/"
       ]
-    }
-  ],
-  "customManagers": [
+    },
     {
-      "customType": "regex",
-      "fileMatch": [
-        "roles/defaults/vars/main\\.yml"
-      ],
-      "datasourceTemplate": "docker",
-      "versioningTemplate": "docker",
-      "matchStrings": [
-        "  \\w+?: (?<depName>[^:\\s]*):(?<currentValue>[^:@\\s]*)@?(?<currentDigest>sha256:[a-f0-9]+)?"
-      ]
+      "enabled": false,
+      "matchUpdateTypes": ["major"],
+      "matchFileNames": ["images/cloud-archive-builder/**/upper-constraints.txt"]
     }
   ],
   "regex": {