diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 72fe9d76db7..7a87fb3ac04 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,10 @@ version: 2
 updates:
   # GitHub Actions updates targeting the default branch (main)
   - package-ecosystem: github-actions
-    directory: /
+    # "/" covers only .github/workflows/; composite actions must be listed.
+    directories:
+      - /
+      - /.github/actions/*
     schedule:
       interval: "monthly"
       time: "09:00"
@@ -55,7 +58,9 @@ updates:
 
   # GitHub Actions updates targeting the 12.9.x branch
   - package-ecosystem: github-actions
-    directory: /
+    directories:
+      - /
+      - /.github/actions/*
     target-branch: "12.9.x"  # keep in sync with backport_branch in ci/versions.yml
     schedule:
       interval: "monthly"