diff --git a/.github/renovate.json5 b/.github/renovate.json5
index e055052502f..0cdfdf83de0 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,9 +1,8 @@
 {
   $schema: "https://docs.renovatebot.com/renovate-schema.json",
   extends: [
-    "config:recommended",
+    "config:best-practices",
     "docker:enableMajor",
-    "helpers:pinGitHubActionDigests",
     "security:openssf-scorecard",
     ":automergeBranch",
     ":automergeDigest",
@@ -22,19 +21,16 @@
   dependencyDashboardTitle: "Renovate Dashboard 🤖",
   suppressNotifications: ["prEditedNotification", "prIgnoreNotification"],
   "pre-commit": {
-    "enabled": true
+    enabled: true,
   },
-  ignorePaths: [
-    "**/*.enc.*",
-    "**/resources/**",
-  ],
+  ignorePaths: ["**/*.enc.*", "**/resources/**"],
   flux: {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
   "helm-values": {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
   kubernetes: {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
 }
diff --git a/kubernetes/apps/base/observability/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/apps/base/observability/kube-prometheus-stack/app/helmrelease.yaml
index 5ce4d0c1963..ad2913b5535 100644
--- a/kubernetes/apps/base/observability/kube-prometheus-stack/app/helmrelease.yaml
+++ b/kubernetes/apps/base/observability/kube-prometheus-stack/app/helmrelease.yaml
@@ -11,7 +11,7 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 77.5.0
+    tag: 77.8.0@sha256:06680bd74fecda3b9d3849d7133244eba39a1b19286e12fb8917faa3325d0076
   url: oci://ghcr.io/prometheus-community/charts/kube-prometheus-stack
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json