diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 24b34ef..8db60a2 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -20,7 +20,7 @@ jobs:
       # Patch/minor bumps and any PR that fixes a security advisory are
       # queued for auto-merge; they still wait for the required CI checks.
       - name: Enable auto-merge
-        if: steps.metadata.outputs.update-type != 'version-update:semver-major' || steps.metadata.outputs.ghsa-id != ''
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.ghsa-id != ''
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}