diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ebbc08af..f2976dc1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,9 +9,16 @@ updates:
     commit-message:
       prefix: "chore"
     ignore:
-      # GitHub always delivers the latest versions for each major
-      # release tag, so handle updates manually
+      # These actions deliver the latest versions by updating the major
+      # release tag, so ignore minor and patch versions
       - dependency-name: "actions/*"
+        update-types:
+          - "version-update:semver-minor"
+          - "version-update:semver-patch"
+      - dependency-name: "Apple-Actions/import-codesign-certs"
+        update-types:
+          - "version-update:semver-minor"
+          - "version-update:semver-patch"
 
   - package-ecosystem: "gomod"
     directory: "/"