diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7bfac09..b503613 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -29,7 +29,13 @@ updates:
         update-types: ["version-update:semver-major"]
       # @tsparticles v4 changed its exported API; the vendored SparklesCore from the
       # Aceternity registry targets the v3 API (initParticlesEngine, IEffect.fill...).
-      - dependency-name: "@tsparticles/*"
+      # NOTE: dependabot `ignore` does NOT support wildcards (only `groups` does) —
+      # list each exact scoped package.
+      - dependency-name: "@tsparticles/react"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "@tsparticles/engine"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "@tsparticles/slim"
         update-types: ["version-update:semver-major"]
       # eslint-config-next majors follow Next.js majors and can pull incompatible
       # plugin versions; framework majors are deliberate, not auto-bumps.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 853de05..537c693 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Bun
         uses: oven-sh/setup-bun@v2