diff --git a/lib/config/presets/internal/config.ts b/lib/config/presets/internal/config.ts
index 451cedb40098ef46d4509c8fc90c01fca1b4fa45..540e6a9b5933599a9d370c002fdbacc196327e12 100644
--- a/lib/config/presets/internal/config.ts
+++ b/lib/config/presets/internal/config.ts
@@ -15,6 +15,16 @@ export const presets: Record<string, Preset> = {
       'workarounds:all',
     ],
   },
+  'best-practices': {
+    configMigration: true,
+    description: 'Preset with best practices from the Renovate maintainers.',
+    extends: [
+      'config:base',
+      'docker:pinDigests',
+      'helpers:pinGitHubActionDigests',
+      ':pinDevDependencies',
+    ],
+  },
   'js-app': {
     description: 'Default configuration for webapps.',
     extends: ['config:base', ':pinAllExceptPeerDependencies'],