diff --git a/renovate.json b/renovate.json
index b7ca323682..59cf1bcafb 100644
--- a/renovate.json
+++ b/renovate.json
@@ -151,6 +151,16 @@
         "patch"
       ],
       "enabled": true
+    },
+    {
+      "description": "Only open frontend update PRs when approved via the Dependency Dashboard",
+      "matchManagers": [
+        "npm"
+      ],
+      "matchFileNames": [
+        "web/ui/**"
+      ],
+      "dependencyDashboardApproval": true
     }
   ],
   "branchPrefix": "deps-update/",