diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 338de641..eef9c1f6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -15,6 +15,7 @@ updates:
 
   - package-ecosystem: "cargo"
     directory: "/"
+    allow: direct # disable dependency updates (excluding security fixes)
     commit-message:
       prefix: chore
       include: scope