diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 827b8bc00c652..10ac6f75439f4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -43,3 +43,17 @@ updates:
       - dependency-name: "*graalvm*" # do not touch graalvm related stuff
       - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
       - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
+
+  - package-ecosystem: "maven"
+    directory: "/bundles"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    labels:
+      - dependencies
+    ignore:
+      - dependency-name: "com.github.jaxb-xew-plugin:jaxb-xew-plugin" # updated with core
+      - dependency-name: "com.diffplug.spotless:spotless-maven-plugin" # updated together with SAT
+      - dependency-name: "*graalvm*" # do not touch graalvm related stuff
+      - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
+      - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
diff --git a/bundles/org.openhab.binding.ipp/pom.xml b/bundles/org.openhab.binding.ipp/pom.xml
index d626560fc9937..2f9365380a1e9 100644
--- a/bundles/org.openhab.binding.ipp/pom.xml
+++ b/bundles/org.openhab.binding.ipp/pom.xml
@@ -45,7 +45,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.17.0</version>
+      <version>2.20.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
diff --git a/bundles/org.openhab.binding.logreader/pom.xml b/bundles/org.openhab.binding.logreader/pom.xml
index 01221d24dcd40..5d438bef20cc4 100644
--- a/bundles/org.openhab.binding.logreader/pom.xml
+++ b/bundles/org.openhab.binding.logreader/pom.xml
@@ -22,7 +22,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.17.0</version>
+      <version>2.20.0</version>
       <scope>compile</scope>
     </dependency>
   </dependencies>
diff --git a/bundles/org.openhab.voice.marytts/pom.xml b/bundles/org.openhab.voice.marytts/pom.xml
index e5db215de591b..8a8646d53b5c2 100644
--- a/bundles/org.openhab.voice.marytts/pom.xml
+++ b/bundles/org.openhab.voice.marytts/pom.xml
@@ -34,7 +34,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.17.0</version>
+      <version>2.20.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>