diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..03116a78
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,50 @@
+# Dependabot version updates.
+#
+# Dependabot updates dependencies that already declare a version; it never
+# *introduces* a pin. docs/requirements.txt is therefore pinned (==) so that it
+# falls under management; tests/robot/requirements.txt keeps its existing >=
+# floors, which Dependabot raises via versioning-strategy: increase below.
+version: 2
+updates:
+  # Go modules: microceph/go.mod (+ go.sum).
+  - package-ecosystem: gomod
+    directory: /microceph/
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    groups:
+      go-dependencies: # bundle all Go bumps into a single PR
+        patterns: ["*"]
+
+  # Python requirements.txt files (docs build + robot tests).
+  - package-ecosystem: pip
+    directories: # plural form takes a list (and globs); `directory` does not
+      - /docs # docs/requirements.txt
+      - /tests/robot # tests/robot/requirements.txt
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    versioning-strategy: increase
+    groups:
+      python-requirements:
+        patterns: ["*"]
+
+  # microceph-orch: PEP 621 pyproject.toml + uv.lock (native uv ecosystem).
+  - package-ecosystem: uv
+    directory: /microceph-orch
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      orch-python:
+        patterns: ["*"]
+
+  # GitHub Actions referenced in .github/workflows/*.yml.
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      github-actions: # one PR for all action bumps
+        patterns: ["*"]
diff --git a/dependabot.yml b/dependabot.yml
deleted file mode 100644
index 3eed6906..00000000
--- a/dependabot.yml
+++ /dev/null
@@ -1,6 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: gomod
-    directory: /microceph/
-    schedule:
-      interval: daily
\ No newline at end of file
diff --git a/docs/requirements.txt b/docs/requirements.txt
index 77ec0062..472303ae 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -1,5 +1,5 @@
-canonical-sphinx[full]
-packaging
-sphinxcontrib-svg2pdfconverter[CairoSVG]
-sphinx-last-updated-by-git
-sphinx-sitemap
+canonical-sphinx[full]==0.6.0
+packaging==26.2
+sphinxcontrib-svg2pdfconverter[CairoSVG]==2.1.0
+sphinx-last-updated-by-git==0.3.8
+sphinx-sitemap==2.9.0