diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4b1f049..53a71b6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,5 @@
-# Monthly updates, grouped into one pull request per ecosystem.
+# Monthly. Minor and patch updates come grouped in one pull request per ecosystem: merge it when CI is green.
+# Each major update comes in its own pull request: read its release notes, and check that CI runs what it changes.
 # Actions are pinned to commit SHAs: Dependabot bumps the SHA and the version comment together.
 version: 2
 updates:
@@ -8,6 +9,6 @@ updates:
       interval: monthly
     groups:
       actions:
-        patterns: ["*"]
+        update-types: ["minor", "patch"]
     commit-message:
       prefix: ci