diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 98a0786..2fb75b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,3 +16,8 @@ updates:
     commit-message:
       prefix: "chore(actions)"
       include: "scope"
+    ignore:
+      # This tells Dependabot to ignore patch and minor bumps for all GHA dependencies, so it won't try to pin v8.3.7 — only major version bumps (e.g. v8 → v9) would trigger a PR
+      - dependency-name: "*"
+        update-types:
+          ["version-update:semver-patch", "version-update:semver-minor"]