diff --git a/.github/renovate.json b/.github/renovate.json
index 5dec65b696db..a8dd650da9f9 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -229,12 +229,17 @@
       "labels": ["dependency"]
     },
     {
-      "description": "For types-* stubs, only allow patch updates. Major/minor bumps track the upstream runtime package version and must be manually coordinated with the corresponding pin.",
+      "description": "types-* stubs (allowlisted). Enabled without matchUpdateTypes, because update types are unknown when Renovate decides whether a package is enabled.",
       "matchPackageNames": ["/^types-/"],
-      "matchUpdateTypes": ["patch"],
       "enabled": true,
       "labels": ["dependency"]
     },
+    {
+      "description": "For types-* stubs, only allow patch updates. Major/minor bumps track the upstream runtime package version and must be manually coordinated with the corresponding pin.",
+      "matchPackageNames": ["/^types-/"],
+      "matchUpdateTypes": ["major", "minor"],
+      "enabled": false
+    },
     {
       "description": "Pre-commit hook repos (allowlisted, matched by owner/repo)",
       "matchPackageNames": [
@@ -315,6 +320,12 @@
       "matchPackageNames": ["ghcr.io/alexxit/go2rtc"],
       "groupName": "go2rtc",
       "groupSlug": "go2rtc"
+    },
+    {
+      "description": "Group the types-* stub updates into one PR",
+      "matchPackageNames": ["/^types-/"],
+      "groupName": "types stubs",
+      "groupSlug": "types-stubs"
     }
   ]
 }