diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ee676d3..4072a65 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -96,7 +96,7 @@ jobs:
       - name: Deploy Preview to Vercel
         if:
           ${{ github.event_name != 'push' && github.event_name != 'workflow_dispatch' &&
-          (!github.event.pull_request.head.repo.fork ||
+          ((!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') ||
           (github.event_name == 'pull_request_target' &&
           contains(github.event.pull_request.labels.*.name, 'trusted'))) }}
         run: node .github/scripts/deploy.mjs --token=${{ secrets.VERCEL_TOKEN }}
@@ -104,7 +104,7 @@ jobs:
       - name: Create GitHub Preview Deployment
         if:
           ${{ github.event_name != 'push' && github.event_name != 'workflow_dispatch' &&
-          (!github.event.pull_request.head.repo.fork ||
+          ((!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') ||
           (github.event_name == 'pull_request_target' &&
           contains(github.event.pull_request.labels.*.name, 'trusted'))) }}
         uses: chrnorm/deployment-action@500aa6a23c81ffa1acf71072aee3cfa2cc2e556a
@@ -132,7 +132,7 @@ jobs:
     needs: build-and-deploy
     runs-on: ubuntu-latest
     if:
-      ${{ !github.event.pull_request.head.repo.fork ||
+      ${{ (!github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]') ||
       (github.event_name == 'pull_request_target' &&
       contains(github.event.pull_request.labels.*.name, 'trusted')) }}
     steps:
diff --git a/package.json b/package.json
index 1834a1c..0cfd129 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
     "unified": "^11.0.5",
     "unist-util-visit": "^5.1.0",
     "vercel": "^51.7.0",
-    "yargs-parser": "^21.1.1"
+    "yargs-parser": "^22.0.0"
   },
   "devDependencies": {
     "@astrojs/rss": "^4.0.18",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index af300f6..0421300 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -96,8 +96,8 @@ importers:
         specifier: ^51.7.0
         version: 51.7.0(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)(rollup@4.57.1)(typescript@5.8.3)
       yargs-parser:
-        specifier: ^21.1.1
-        version: 21.1.1
+        specifier: ^22.0.0
+        version: 22.0.0
     devDependencies:
       '@astrojs/rss':
         specifier: ^4.0.18
@@ -5568,10 +5568,6 @@ packages:
     engines: {node: '>= 14'}
     hasBin: true
 
-  yargs-parser@21.1.1:
-    resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
-    engines: {node: '>=12'}
-
   yargs-parser@22.0.0:
     resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
     engines: {node: ^20.19.0 || ^22.12.0 || >=23}
@@ -11784,8 +11780,6 @@ snapshots:
   yaml@2.4.2:
     optional: true
 
-  yargs-parser@21.1.1: {}
-
   yargs-parser@22.0.0: {}
 
   yauzl-clone@1.0.4: