diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 0000000..2117e66
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,20 @@
+workflow:
+  rules:
+    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_PIPELINE_SOURCE == "web"
+
+stages:
+  - verify
+
+verify:
+  stage: verify
+  image: python:3.9
+  tags:
+    - gsp-privileged
+  before_script:
+    - apt-get update && apt-get install --no-install-recommends -y make
+    - make ci-install
+  script:
+    - make test
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..f5efedb
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,24 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "enabledManagers": [
+    "gitlabci"
+  ],
+  "prConcurrentLimit": 100,
+  "lockFileMaintenance": {
+    "enabled": false
+  },
+  "packageRules": [
+    {
+      "description": "GitLab CI dependency updates weekly on Thursday",
+      "matchManagers": [
+        "gitlabci"
+      ],
+      "schedule": [
+        "on thursday"
+      ]
+    }
+  ]
+}