diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..7358a88
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,16 @@
+{
+  "onboarding": false,
+  "requireConfig": "optional",
+  "customManagers": [
+    {
+      "customType": "regex",
+      "managerFilePatterns": [
+        "/(^|/)template$/"
+      ],
+      "matchStrings": [
+        "version=(?<currentValue>.*) # renovate: datasource=(?<datasource>.*) depName=(?<depName>.*)"
+      ],
+      "extractVersionTemplate": "^v?(?<version>.*)$"
+    }
+  ]
+}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 5413463..d4c06c5 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,18 +1,59 @@
 name: build
 
 on:
-  # TODO: Enable once we have conditional build logic built
-  # pull_request:
-  #   paths:
-  #     - 'srcpkgs/**'
+  pull_request:
+    paths:
+      - "srcpkgs/**"
+    types:
+      - opened
+      - reopened
+      - synchronize
+    branches:
+      - main
   push:
     paths:
-      - 'srcpkgs/**'
-      - '.github/**' # for easier debugging
+      - "srcpkgs/**"
+    branches:
+      - main
 
 jobs:
+  checksum:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: get changed package
+        run: |
+          echo "CHANGED_PKG=$(git diff --name-only origin/main ${GITHUB_HEAD_REF} "srcpkgs/*/template" | head -1 | cut -d/ -f2)" >> $GITHUB_ENV
+
+      - name: checkout upstream templates
+        if: ${{ env.CHANGED_PKG != '' }}
+        uses: actions/checkout@v4
+        with:
+          repository: void-linux/void-packages
+          ref: master
+          fetch-depth: 1
+          path: distdir
+
+      - name: generate checksum
+        if: ${{ env.CHANGED_PKG != '' }}
+        run: |
+          XBPS_DISTDIR="$PWD/distdir" xgensum -i ${{ env.CHANGED_PKG }}
+
+      - name: Commit
+        if: ${{ env.CHANGED_PKG != '' }}
+        uses: stefanzweifel/git-auto-commit-action@v6
+        with:
+          file_pattern: "*/template"
+          commit_message: "Update checksum"
+
   changedpkgs:
     name: Check package changes
+    needs: [checksum]
     runs-on: ubuntu-latest
     if: "!contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"
 
@@ -37,14 +78,20 @@ jobs:
   build:
     name: Build packages
     runs-on: ubuntu-latest
-    needs: [ changedpkgs ]
+    needs: [changedpkgs]
     if: "needs.changedpkgs.outputs.changed != '' && !contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"
 
     strategy:
       fail-fast: false
       matrix:
         config:
-          - { arch: x86_64,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 1 }
+          - {
+              arch: x86_64,
+              host: x86_64,
+              libc: glibc,
+              platform: linux/amd64,
+              test: 1,
+            }
           # - { arch: i686,         host: i686,        libc: glibc, platform: linux/386,   test: 1 }
           # - { arch: aarch64,      host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
           # - { arch: armv7l,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
@@ -58,9 +105,9 @@ jobs:
       volumes:
         - /dev:/dev
       env:
-        ARCH: '${{ matrix.config.arch }}'
-        BOOTSTRAP: '${{ matrix.config.host }}'
-        TEST: '${{ matrix.config.test }}'
+        ARCH: "${{ matrix.config.arch }}"
+        BOOTSTRAP: "${{ matrix.config.host }}"
+        TEST: "${{ matrix.config.test }}"
 
     steps:
       - name: Prepare container
@@ -136,7 +183,7 @@ jobs:
   deploy:
     name: Deploy repository
     runs-on: ubuntu-latest
-    needs: [ build ]
+    needs: [build]
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}-deployment
       cancel-in-progress: false
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
new file mode 100644
index 0000000..61ced21
--- /dev/null
+++ b/.github/workflows/renovate.yaml
@@ -0,0 +1,28 @@
+name: renovate
+on:
+  schedule:
+    - cron: "0 * * * *"
+  push:
+    paths:
+      - ".github/**" # TODO: remove after debugging
+
+env:
+  LOG_LEVEL: "info"
+  RENOVATE_AUTODISCOVER: true
+  RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
+  RENOVATE_PLATFORM: github
+  # RENOVATE_PLATFORM_COMMIT: true
+  # RENOVATE_BOT_NAME: 'breq'
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: renovate package versions
+        uses: renovatebot/github-action@v43.0.1
+        with:
+          configurationFile: .github/renovate.json
+          token: ${{ secrets.RENOVATE_TOKEN }}
diff --git a/srcpkgs/ripgrep-all/template b/srcpkgs/ripgrep-all/template
index 4d785de..2f435c4 100644
--- a/srcpkgs/ripgrep-all/template
+++ b/srcpkgs/ripgrep-all/template
@@ -1,6 +1,6 @@
 # Template file for 'ripgrep-all'
 pkgname=ripgrep-all
-version=0.10.6
+version=0.10.6 # renovate: datasource=github-tags depName=phiresky/ripgrep-all
 revision=2
 build_style=cargo
 hostmakedepends="rust pkg-config"