diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c550e95a..e197a9ca 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -34,3 +34,39 @@ updates:
     default-days: 4
     exclude:
       - "@nextcloud/*"
+
+# stable-0.1: maintenance branch for Nextcloud 32–35
+- package-ecosystem: "github-actions"
+  directory: ".github/workflows"
+  target-branch: "stable-0.1"
+  commit-message:
+    prefix: "ci"
+    include: "scope"
+  schedule:
+    interval: weekly
+    day: saturday
+    time: "03:00"
+    timezone: Europe/Berlin
+  cooldown:
+    default-days: 4
+
+- package-ecosystem: npm
+  directory: "/"
+  target-branch: "stable-0.1"
+  commit-message:
+    prefix: "build"
+    include: "scope"
+  versioning-strategy: "increase"
+  open-pull-requests-limit: 10
+  schedule:
+    interval: weekly
+    day: saturday
+    time: "03:00"
+    timezone: Europe/Berlin
+  cooldown:
+    default-days: 4
+    exclude:
+      - "@nextcloud/*"
+  ignore:
+    - dependency-name: "*"
+      update-types: ["version-update:semver-major", "version-update:semver-minor"]
diff --git a/.github/workflows/npm-audit-fix.yml b/.github/workflows/npm-audit-fix.yml
index c812ebd7..ec025817 100644
--- a/.github/workflows/npm-audit-fix.yml
+++ b/.github/workflows/npm-audit-fix.yml
@@ -26,6 +26,7 @@ jobs:
       matrix:
         branches:
           - ${{ github.event.repository.default_branch }}
+          - stable-0.1
 
     name: npm-audit-fix-${{ matrix.branches }}