diff --git a/default.json b/default.json
index e431646..4c6d149 100644
--- a/default.json
+++ b/default.json
@@ -90,6 +90,34 @@
       "automerge": false,
       "dependencyDashboardApproval": true
     },
+    {
+      "description": "TimescaleDB: a minor needs ALTER EXTENSION timescaledb UPDATE by hand, so it never merges itself",
+      "matchPackageNames": [
+        "timescale/timescaledb",
+        "timescale/timescaledb-ha"
+      ],
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "description": "Python image: 3.12 to 3.14 is a language upgrade that docker versioning calls a minor",
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "python",
+        "docker.io/python",
+        "docker.io/library/python"
+      ],
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
     {
       "matchDatasources": [
         "docker"