diff --git a/attribute-endpoints-provider/pom.xml b/attribute-endpoints-provider/pom.xml
index 7769188..83de05a 100644
--- a/attribute-endpoints-provider/pom.xml
+++ b/attribute-endpoints-provider/pom.xml
@@ -86,7 +86,7 @@
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>2.22.1</version>
+          <version>3.5.5</version>
         </plugin>
         <plugin>
           <artifactId>maven-jar-plugin</artifactId>
@@ -94,11 +94,11 @@
         </plugin>
         <plugin>
           <artifactId>maven-install-plugin</artifactId>
-          <version>2.5.2</version>
+          <version>3.1.4</version>
         </plugin>
         <plugin>
           <artifactId>maven-deploy-plugin</artifactId>
-          <version>2.8.2</version>
+          <version>3.1.4</version>
         </plugin>
         <!-- site lifecycle, see
         https://maven.apache.org/ref/current/maven-core/lifecycles.html#site_Lifecycle -->
diff --git a/renovate.json b/renovate.json
index d3e62f2..2630b7e 100644
--- a/renovate.json
+++ b/renovate.json
@@ -9,6 +9,12 @@
       "groupName": "maven plugins",
       "groupSlug": "maven-plugins",
       "matchPackagePatterns": [ "org\\.apache\\.maven\\.plugins\\.*" ]
+    },
+    // Group Keycloak package updates.
+    {
+      "groupName": "Keycloak packages",
+      "groupSlug": "keycloak-packages",
+      "matchPackagePatterns": [ "/(quay\\.io\/keycloak\/keycloak)|(org\\.keycloak:keycloak-parent)/" ]
     }
   ]
 }