diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 61db74a6a..67b13b903 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,9 +12,27 @@ updates:
       interval: "daily"
     ignore:
       - dependency-name: "@databricks/*"
+      # ESM-only majors — blocked until the build/test tooling is migrated off
+      # ts-node (CommonJS) to an ESM runner (tsx). See PRs #1934, #1932.
+      - dependency-name: "yargs"
+        versions: [">=18"]
+      - dependency-name: "chai"
+        versions: [">=5"]
+      - dependency-name: "@types/chai"
+        versions: [">=5"]
+      # @types/vscode must track engines.vscode (^1.86.0); bump both together
+      # only when the minimum supported VS Code version is deliberately raised.
+      # See PR #1933.
+      - dependency-name: "@types/vscode"
+        versions: [">=1.87"]
   - package-ecosystem: "npm"
     directory: "/packages/databricks-vscode-types"
     ignore:
       - dependency-name: "@databricks/*"
+      # @types/vscode must track engines.vscode (^1.86.0); bump both together
+      # only when the minimum supported VS Code version is deliberately raised.
+      # See PR #1933.
+      - dependency-name: "@types/vscode"
+        versions: [">=1.87"]
     schedule:
       interval: "daily"