diff --git a/renovate.json b/renovate.json
index 75f587d..3d82087 100644
--- a/renovate.json
+++ b/renovate.json
@@ -7,6 +7,13 @@
       "description": "Disable nektos/act, it's replaced",
       "matchDepNames": ["github.com/nektos/act"],
       "enabled": false
+    },
+    {
+      "description": "Enable indirect gomod updates but require approval",
+      "matchManagers": ["gomod"],
+      "matchDepTypes": ["indirect"],
+      "enabled": true,
+      "dependencyDashboardApproval": true
     }
   ]
 }