diff --git a/.github/actions/setup-node/action.yml b/.github/actions/setup-node/action.yml
index 206d56da..26c5cc56 100644
--- a/.github/actions/setup-node/action.yml
+++ b/.github/actions/setup-node/action.yml
@@ -18,7 +18,7 @@ runs:
         }}' >> "$GITHUB_ENV"
 
     - name: ♻️ Restore `node_modules`
-      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       id: node-modules-restore
       with:
         path: node_modules
@@ -53,7 +53,7 @@ runs:
 
     - name: ♻️ Write `node_modules` cache
       if: inputs.save-cache == 'true' && env.CACHE_HIT != 'true'
-      uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v5.0.2
+      uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: node_modules
         key: ${{ env.CACHE_KEY }}
diff --git a/.github/renovate.json b/.github/renovate.json
index ee556b49..488682b9 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -2,9 +2,15 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["github>renovatebot/.github", ":pinDependencies"],
   "packageRules": [
+    {
+      "description": "Always group updates to the Renovate Docker image",
+      "groupName": "renovate",
+      "matchPackageNames": ["ghcr.io/renovatebot/renovate"]
+    },
     {
       "description": "Update references in Markdown files weekly",
       "matchFileNames": ["**/*.md"],
+      "matchUpdateTypes": ["!major"],
       "extends": ["schedule:weekly"],
       "automerge": true,
       "minimumReleaseAge": null,
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 18a2f37c..a563f644 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,7 +10,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  RENOVATE_VERSION: 42.92.11 # renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate
+  RENOVATE_VERSION: 42.95.1 # renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate
 
 jobs:
   prepare:
@@ -117,7 +117,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     container:
-      image: ghcr.io/renovatebot/renovate:42.92.11@sha256:de9d73d637da5a170d0b43c122d259a5e3baac6a7f7c7b46a89e0b9e9d9938c2
+      image: ghcr.io/renovatebot/renovate:42.95.1@sha256:af45fc43af24a3bbd9cc55ea6ac189d3910c988e82fa9acb93a5bb32d9f1bde5
       # github hosted runners are running as `1001:127` (ubuntu:docker)
       options: -u 1001:0 --group-add 1000 --group-add 12021 --group-add 127
 
diff --git a/.github/workflows/pr-auto.yml b/.github/workflows/pr-auto.yml
new file mode 100644
index 00000000..2c126928
--- /dev/null
+++ b/.github/workflows/pr-auto.yml
@@ -0,0 +1,18 @@
+name: auto-pr
+
+on:
+  pull_request_target:
+    types:
+      - opened
+
+jobs:
+  review:
+    if: github.event.action == 'opened' && !endsWith(github.event.pull_request.user.login, '[bot]')
+    runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: hkusu/review-assign-action@5bee595fdb9765d4a0bd35724b6302fa15569158 # v1.4.0
+        with:
+          reviewers: ${{ vars.REVIEWERS }}
+          max-num-of-reviewers: 2
diff --git a/tsconfig.json b/tsconfig.json
index 0e147db6..ebb57a91 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -4,6 +4,7 @@
     "@tsconfig/node20/tsconfig.json"
   ],
   "compilerOptions": {
+    "allowJs": true,
     "allowSyntheticDefaultImports": true,
     "outDir": "dist",
     "module": "ESNext",