diff --git a/.github/renovate.json b/.github/renovate.json
index 221e672..71a88ca 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -6,7 +6,9 @@
     "helpers:pinGitHubActionDigests"
   ],
   "pip_requirements": {
-    "fileMatch": ["upper-constraints.txt"]
+    "fileMatch": [
+      "upper-constraints.txt"
+    ]
   },
   "customManagers": [
     {
@@ -24,7 +26,11 @@
   "packageRules": [
     {
       "enabled": false,
-      "matchUpdateTypes": ["major", "minor", "patch"],
+      "matchUpdateTypes": [
+        "major",
+        "minor",
+        "patch"
+      ],
       "matchPackagePrefixes": [
         "docker.io/bitnami",
         "docker.io/coredns",
@@ -50,13 +56,22 @@
     },
     {
       "enabled": false,
-      "matchUpdateTypes": ["major"],
-      "excludePackageNames": ["cryptography"],
-      "matchFileNames": ["images/cloud-archive-builder/**/upper-constraints.txt"]
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "excludePackageNames": [
+        "cryptography",
+        "pyOpenSSL"
+      ],
+      "matchFileNames": [
+        "images/cloud-archive-builder/**/upper-constraints.txt"
+      ]
     },
     {
       "groupName": "upper-constraints",
-      "matchFileNames": ["images/cloud-archive-builder/**/upper-constraints.txt"]
+      "matchFileNames": [
+        "images/cloud-archive-builder/**/upper-constraints.txt"
+      ]
     }
   ],
   "regex": {