diff --git a/renovate.json b/renovate.json
index 330f05c06836..40d1c3150233 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,16 +4,12 @@
     "security:only-security-updates",
     ":semanticCommitTypeAll(deps)"
   ],
+  "gitIgnoredAuthors": ["flagsmith-engineering[bot]@users.noreply.github.com"],
   "lockFileMaintenance": {
     "enabled": true,
-    "schedule": ["before 4am on monday"]
+    "schedule": ["before 9am on monday"]
   },
   "packageRules": [
-    {
-      "description": "Re-enable lock file maintenance, which security:only-security-updates disables via its blanket matchPackageNames ['*'] rule. Renovate raises security PRs from manifest entries, so a CVE in a package that appears only in a lock file is never actioned; refreshing the lock file within existing ranges is the only mechanism that reaches transitive pins.",
-      "matchUpdateTypes": ["lockFileMaintenance"],
-      "enabled": true
-    },
     {
       "matchManagers": ["pep621"],
       "matchFileNames": ["api/**"],
@@ -49,6 +45,12 @@
       "matchPackageNames": ["flagsmith-common", "flagsmith-private"],
       "enabled": true,
       "rangeStrategy": "bump"
+    },
+    {
+      "description": "Re-enable lock file maintenance, which security:only-security-updates disables. Keep last with an empty scope to ensure commit scope is applied correctly.",
+      "matchUpdateTypes": ["lockFileMaintenance"],
+      "enabled": true,
+      "semanticCommitScope": ""
     }
   ],
   "semanticCommitScope": ""