diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 17d3a56a1..b826bdb57 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,72 +1,18 @@
 version: 2
 updates:
-  # GitHub Actions workflows
   - package-ecosystem: "github-actions"
     directory: "/"
-    schedule:
-      interval: "daily"
+    schedule: { interval: "daily" }
     open-pull-requests-limit: 10
+    rebase-strategy: auto
+    labels: [dependencies, github-actions]
 
-  # JavaScript / TypeScript (npm)
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Python (pip, requirements*.txt)
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Go modules
-  - package-ecosystem: "gomod"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Dockerfiles
   - package-ecosystem: "docker"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Ruby (bundler)
-  - package-ecosystem: "bundler"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Java (gradle)
-  - package-ecosystem: "gradle"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # Java (maven)
-  - package-ecosystem: "maven"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # PHP (composer)
-  - package-ecosystem: "composer"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
-  # .NET (nuget)
-  - package-ecosystem: "nuget"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-
+    directory: "/ann/src/main/python/dataflow/worker_harness/Dockerfile"
+    schedule: { interval: "daily" }
+    open-pull-requests-limit: 10
+    rebase-strategy: auto
+    labels: [dependencies, docker]
+    ignore: &ignore_major_minor_updates
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]