diff --git a/renovate.json5 b/renovate.json5
index d50c442adff..a80ede4ac17 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -60,6 +60,25 @@
        */
       minimumReleaseAge: "3 days"
     },
+    {
+      /**
+       * Automerge minor and patch updates once CI passes. Majors still need
+       * a review. With platformAutomerge off, Renovate merges the PR itself
+       * and waits for every check, including ones that aren't required.
+       */
+      matchPackageNames: [
+        "vitest",
+        "@playwright/test",
+        "@axe-core/playwright",
+        "playwright-core",
+        "@types/node",
+        "github/codeql-action",
+        "actions/*"
+      ],
+      matchUpdateTypes: ["minor", "patch"],
+      automerge: true,
+      platformAutomerge: false
+    },
     {
       /**
        * The built-in Docker manager tracks the mcr.microsoft.com/playwright tag