diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 73206b1..ad6fa13 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,4 @@
-# managed-by: talieisin-org-bootstrap v4
+# managed-by: talieisin-org-bootstrap v5
 version: 2
 updates:
   - package-ecosystem: "github-actions"
@@ -7,6 +7,10 @@ updates:
       interval: "weekly"
     open-pull-requests-limit: 10
     groups:
+      majors:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major"]
       minor-and-patch:
         applies-to: version-updates
         patterns: ["*"]
diff --git a/.github/workflows/dependabot-agent.yml b/.github/workflows/dependabot-agent.yml
index dd6c21c..db5d7ce 100644
--- a/.github/workflows/dependabot-agent.yml
+++ b/.github/workflows/dependabot-agent.yml
@@ -1,6 +1,7 @@
 # managed-by: talieisin-org-bootstrap v4
 # Fires when the org dispatcher labels a major Dependabot PR `ai-upgrade`.
-# All logic lives in Talieisin/.github — see its docs/ai-automation.md.
+# All logic lives in the org's shared reusable workflows; operational
+# documentation is internal.
 name: AI upgrade
 on:
   pull_request: