diff --git a/renovate.json b/renovate.json
index 2d0a9848..a2ac9696 100644
--- a/renovate.json
+++ b/renovate.json
@@ -38,10 +38,13 @@
         "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
+    // Automatically merge patch level updates
+    // https://docs.renovatebot.com/key-concepts/automerge/
     {
       "matchUpdateTypes": ["patch"],
-      "matchCurrentVersion": "!/^0/",
-      "automerge": true
+      "automerge": true,
+      "ignoreTests": true,
+      "automergeType": "branch"
     },
     {
       "matchDatasources": ["docker"],
diff --git a/resources/chaosknoten/acmedns/docker_compose/compose.yaml.j2 b/resources/chaosknoten/acmedns/docker_compose/compose.yaml.j2
index 2553f4d7..4681da82 100644
--- a/resources/chaosknoten/acmedns/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/acmedns/docker_compose/compose.yaml.j2
@@ -2,7 +2,7 @@
 services:
   oauth2-proxy:
     container_name: oauth2-proxy
-    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3
+    image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.4
     command: --config /oauth2-proxy.cfg
     hostname: oauth2-proxy
     volumes: