diff --git a/.github/renovate.json5 b/.github/renovate.json5
index debe9f58a7..4a53eb10d4 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -5,6 +5,13 @@
     schedule: ["after 10pm every weekday", "before 5am every weekday", "every weekend"],
     ignorePaths: ["**/node_modules/**", "**/bower_components/**", "**/vendor/**", "**/examples/**"], // we have to set this, in order to override the default that comes from `config:recommended`, which ignores any packages in directories like "tests"
     packageRules: [
+        {
+            // we don't want to update ArchUnitNET currently, because there is a bug in the latest version (see https://github.com/TNG/ArchUnitNET/issues/320)
+            matchDatasources: ["nuget"],
+            packageNames: ["TngTech.ArchUnitNET.xUnit"],
+            enabled: false
+        },
+
         {
             // we don't want to update eslint currently, because there is a breaking change in its config
             matchDatasources: ["npm"],
@@ -46,6 +53,13 @@
             matchDatasources: ["nuget"],
             matchUpdateTypes: ["minor"]
         },
+        {
+            groupName: "minor-updates-npm",
+            matchDatasources: ["npm"],
+            matchUpdateTypes: ["minor"],
+            automerge: true,
+            automergeType: "branch"
+        },
         {
             groupName: "minor-updates-dart",
             matchDatasources: ["dart"],
diff --git a/Applications/ConsumerApi/test/ConsumerApi.Tests.Performance/tools/result-analyzer/package-lock.json b/Applications/ConsumerApi/test/ConsumerApi.Tests.Performance/tools/result-analyzer/package-lock.json
index ffe8671cc0..fdbec201c3 100644
--- a/Applications/ConsumerApi/test/ConsumerApi.Tests.Performance/tools/result-analyzer/package-lock.json
+++ b/Applications/ConsumerApi/test/ConsumerApi.Tests.Performance/tools/result-analyzer/package-lock.json
@@ -479,9 +479,9 @@
             }
         },
         "node_modules/tsx": {
-            "version": "4.19.1",
-            "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.19.1.tgz",
-            "integrity": "sha512-0flMz1lh74BR4wOvBjuh9olbnwqCPc35OOlfyzHba0Dc+QNUeWX/Gq2YTbnwcWPO3BMd8fkzRVrHcsR+a7z7rA==",
+            "version": "4.19.2",
+            "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.19.2.tgz",
+            "integrity": "sha512-pOUl6Vo2LUq/bSa8S5q7b91cgNSjctn9ugq/+Mvow99qW6x/UZYwzxy/3NmqoT66eHYfCVvFvACC58UBPFf28g==",
             "dev": true,
             "license": "MIT",
             "dependencies": {
diff --git a/scripts/sql/sqlserver/setup.sql b/scripts/sql/sqlserver/setup.sql
index 2ef4ce39a4..96341d0846 100644
--- a/scripts/sql/sqlserver/setup.sql
+++ b/scripts/sql/sqlserver/setup.sql
@@ -246,10 +246,10 @@ GRANT SELECT ON SCHEMA::Challenges TO quotas
 GRANT SELECT ON SCHEMA::Devices TO quotas
 GRANT SELECT ON SCHEMA::Files TO quotas
 GRANT SELECT ON SCHEMA::Messages TO quotas
-GRANT SELECT ON SCHEMA::Relationships TO synchronization
 GRANT SELECT ON SCHEMA::Relationships TO quotas
 GRANT SELECT ON SCHEMA::Synchronization TO quotas
 GRANT SELECT ON SCHEMA::Tokens TO quotas
+GRANT SELECT ON SCHEMA::Relationships TO synchronization
 GRANT SELECT ON SCHEMA::Relationships TO adminUi
 GRANT SELECT ON SCHEMA::Files TO adminUi
 GRANT SELECT ON SCHEMA::Messages TO adminUi