diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f40ac516..2766b31e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,7 +14,9 @@ updates:
         patterns:
           - "*"
         exclude-patterns:
-          - attrs  # galaxy-importer ceiling confuses dependabot
+          # galaxy-importer ceiling confuses dependabot
+          - attrs
+          - bleach
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: