diff --git a/.renovate/groups.json5 b/.renovate/groups.json5
index 86d6e241..23888a75 100644
--- a/.renovate/groups.json5
+++ b/.renovate/groups.json5
@@ -100,6 +100,13 @@
       "matchUpdateTypes": ["major"],
       "dependencyDashboardApproval": true
     },
+    // manually approve app-template major releases
+    {
+      "matchPackagePatterns": ["app-template"],
+      "matchUpdateTypes": ["minor"],
+      "dependencyDashboardApproval": false
+      "automerge": false,
+    },
     // Miniflux enforce distroless images
     {
       "matchDatasources": ["docker"],