diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 827b8bc00c652..10ac6f75439f4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -43,3 +43,17 @@ updates:
       - dependency-name: "*graalvm*" # do not touch graalvm related stuff
       - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
       - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
+
+  - package-ecosystem: "maven"
+    directory: "/bundles"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 50
+    labels:
+      - dependencies
+    ignore:
+      - dependency-name: "com.github.jaxb-xew-plugin:jaxb-xew-plugin" # updated with core
+      - dependency-name: "com.diffplug.spotless:spotless-maven-plugin" # updated together with SAT
+      - dependency-name: "*graalvm*" # do not touch graalvm related stuff
+      - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
+      - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
diff --git a/bundles/org.openhab.binding.ipp/pom.xml b/bundles/org.openhab.binding.ipp/pom.xml
index d626560fc9937..b4d84aee66216 100644
--- a/bundles/org.openhab.binding.ipp/pom.xml
+++ b/bundles/org.openhab.binding.ipp/pom.xml
@@ -34,7 +34,7 @@
     <dependency>
       <groupId>xmlpull</groupId>
       <artifactId>xmlpull</artifactId>
-      <version>1.1.3.1</version>
+      <version>1.1.3.4a</version>
     </dependency>
     <dependency>
       <groupId>commons-lang</groupId>