diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 123ce1fb..0593d542 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,7 +4,8 @@ updates:
     directory: /releases
     schedule:
       interval: cron
-      cronjob: '19 * * * *'
+      # Dependabot requires at least 24 hours between checks.
+      cronjob: '19 0 * * *'
     versioning-strategy: increase
     open-pull-requests-limit: 1
     allow:
diff --git a/README.md b/README.md
index 1a63c4a2..ac4a9cf1 100644
--- a/README.md
+++ b/README.md
@@ -103,7 +103,7 @@ npm run check:public
 
 Set **Settings > Pages > Source** to **GitHub Actions** and allow deployments from `main` in the `github-pages` environment.
 
-Dependabot checks npm hourly at 19 minutes past the hour (UTC), including weekends, and opens a grouped PR when SDK versions change. The versions in `releases/package.json` are build inputs; user installation examples still use the latest SDK without pins.
+Dependabot checks npm daily at 00:19 UTC, including weekends, and opens a grouped PR when SDK versions change. GitHub requires at least 24 hours between Dependabot checks. The versions in `releases/package.json` are build inputs; user installation examples still use the latest SDK without pins.
 
 The [publishing workflow](.github/workflows/publish.yml):