diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4c33e8f..c5565cb 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -85,6 +85,23 @@ updates:
       # and math rendering is core). Patch bumps (0.16.x) still flow.
       - dependency-name: "katex"
         update-types: ["version-update:semver-minor", "version-update:semver-major"]
+      # App runtime libs: suppress MAJOR PRs. Each is a deliberate migration,
+      # not an auto-merge (@lingui 4->6 is a coordinated cross-package move with
+      # a deprecated macro; openid-client 5->6 is an auth-API rewrite; tsmonads,
+      # rambda, serialize-error carry breaking API/ESM changes; uuid advisory is
+      # non-applicable and peer-blocked). Minor/patch still flow via the group.
+      - dependency-name: "@lingui/*"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "openid-client"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "tsmonads"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "rambda"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "serialize-error"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "uuid"
+        update-types: ["version-update:semver-major"]
 
   # Keep GitHub Actions used by the CI workflow up to date
   - package-ecosystem: "github-actions"