diff --git a/renovate.json b/renovate.json
index 0cc2c595b..5ae5321bf 100644
--- a/renovate.json
+++ b/renovate.json
@@ -31,7 +31,7 @@
         "/(^|/)templates/.*\\.yaml$/"
       ],
       "matchStrings": [
-        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+tag: (?<currentValue>.*)"
+        "# renovate: datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s+tag:\\s*[\"']?(?<currentValue>[^@\"'\\s\n]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
       ]
     },
     {
@@ -122,7 +122,8 @@
     {
       "description": "Automerge image patches",
       "matchUpdateTypes": [
-        "patch"
+        "patch",
+        "pinDigest"
       ],
       "matchDatasources": [
         "docker"
@@ -188,7 +189,8 @@
     {
       "description": "Automerge appVersion and images, merged",
       "matchUpdateTypes": [
-        "patch"
+        "patch",
+        "pinDigest"
       ],
       "matchManagers": [
         "custom.regex",