diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 91f59b7..735d79b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -51,3 +51,13 @@ updates:
         update-types:
           - "minor"
           - "patch"
+    ignore:
+      # NEVER let Dependabot bump the Comfy-Org/github-workflows reusables: a caller
+      # pins them TWICE (`uses:` SHA + `workflows_ref:` input) and Dependabot only
+      # rewrites `uses:`, splitting the pair. The bump-*-callers fleet in
+      # github-workflows moves both pins together. Both entries are needed:
+      # Dependabot names a reusable by its FULL path, and a bare `dependency-name`
+      # is an exact match (the exact form covers `owner/repo`, the `/*` form the
+      # per-file names). Do NOT collapse to `Comfy-Org/github-workflows*`.
+      - dependency-name: "Comfy-Org/github-workflows"
+      - dependency-name: "Comfy-Org/github-workflows/*"