@@ -18,8 +18,12 @@ jobs:
         run: |
           : "${BRANCH_NAME:?github.head_ref is required}"
 
-          # Valid patterns: bugfix/, hotfix/, feature/, infrastructure/, maintenance/, content/
-          if [[ ! $BRANCH_NAME =~ ^(bugfix|hotfix|feature|infrastructure|maintenance|content|dependabot)/[a-z0-9-]+$ ]]; then
+          HUMAN_BRANCH_REGEX='^(bugfix|hotfix|feature|infrastructure|maintenance|content)/[a-z0-9-]+$'
+          DEPENDABOT_BRANCH_REGEX='^dependabot/[a-z0-9._/-]+$'
+
+          # Human branches use a strict single-segment slug; dependabot branches are machine-generated and may include
+          # nested path segments, underscores, and dots (for package manager + dependency + version details).
+          if [[ ! $BRANCH_NAME =~ $HUMAN_BRANCH_REGEX && ! $BRANCH_NAME =~ $DEPENDABOT_BRANCH_REGEX ]]; then
             echo "❌ Invalid branch name: $BRANCH_NAME"
             echo ""
             echo "Branch names must follow one of these patterns:"
@@ -29,9 +33,9 @@ jobs:
             echo "  - infrastructure/<desc>    (e.g., infrastructure/setup-ci)"
             echo "  - maintenance/<desc>       (e.g., maintenance/update-dependencies)"
             echo "  - content/<description>    (e.g., content/update-about-page)"
-            echo "  - dependabot/<description> (machine generated)"
+            echo "  - dependabot/<...>         (machine generated; may include '/' '_' '.')"
             echo ""
-            echo "Use lowercase letters, numbers, and hyphens only."
+            echo "For non-dependabot branches, use lowercase letters, numbers, and hyphens only."
             exit 1
           fi