diff --git a/renovate-presets/default.json5 b/renovate-presets/default.json5
index 84047c4c4..3a244ca91 100644
--- a/renovate-presets/default.json5
+++ b/renovate-presets/default.json5
@@ -3,6 +3,7 @@
   extends: ['group:monorepos'],
   dependencyDashboard: true,
   rangeStrategy: 'replace',
+  automerge: false,
 
   // Schedule Renovate to run during off-peak hours
   schedule: ['after 10:00pm every weekday', 'before 5:00am every weekday', 'every weekend'],
@@ -21,6 +22,11 @@
     enabled: true,
   },
 
+  // Feature disabled: permission to enable vulnerability alerts is not granted
+  'vulnerabilityAlerts': {
+    'enabled': false,
+  },
+
   // Ignored dependencies in all repositories
   ignoreDeps: [
     'build_bazel_rules_nodejs',
@@ -60,13 +66,8 @@
       followTag: 'next',
       separateMajorMinor: false,
       schedule: ['at any time'],
-      matchDepNames: [
-        '@angular-devkit/**',
-        '@angular/**',
-        '@schematics/**',
-        'angular/**',
-        'ng-packagr',
-      ],
+      matchDepNames: ['@angular-devkit/**', '@angular/**', '@schematics/**', 'ng-packagr'],
+      matchPackageNames: ['angular/**'],
     },
 
     // Disable 'next' tag tracking on non-main branches