diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1b687459d18e6..0edf47205bbe7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,3 +11,7 @@ updates:
       timezone: "America/Los_Angeles"
     labels:
       - "autosubmit"
+    ignore:
+      # ignore patch versions, just rely on minor in order to update fewer times
+      - dependency-name: "github/codeql-action"
+        update-types: ["version-update:semver-minor"]