diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 24f13d0f..6ceeaa25 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,6 +3,9 @@ updates:
   - package-ecosystem: 'uv'
     # uv workspace root: one uv.lock covers every packages/* member.
     directory: '/'
+    # These are published libraries: never change their version requirements,
+    # only uv.lock. A release outside a range is a manual decision.
+    versioning-strategy: 'lockfile-only'
     schedule:
       interval: 'daily'
     cooldown: