diff --git a/.github/workflows/config.yml b/.github/workflows/config.yml
index 83a56c8..2f3bb15 100644
--- a/.github/workflows/config.yml
+++ b/.github/workflows/config.yml
@@ -13,7 +13,7 @@ jobs:
     name: CPP Lint
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ github.token }}
           show-progress: false
@@ -28,7 +28,7 @@ jobs:
     name: PlatformIO Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_TOKEN || github.token }}
           persist-credentials: true
@@ -58,7 +58,7 @@ jobs:
     name: Screenshot Regression Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ github.token }}
           show-progress: false
@@ -74,10 +74,12 @@ jobs:
           path: test/test_screenshots/output/
 
   pio-build:
+    # Dependabot PRs cannot access private library repos; push CI still validates the full build.
+    if: ${{ github.event_name != 'pull_request' || !startsWith(github.head_ref, 'dependabot/') }}
     name: PlatformIO Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.GH_TOKEN || github.token }}
           persist-credentials: true