diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0193a6e..6d3ed58 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -33,6 +33,16 @@ updates:
       # Maven 3 so use SLF4J 1.7.x
       - dependency-name: "org.slf4j:*"
         versions: [">= 2.0.0"]
+      # ASF plugins stay on the Maven 3.9 baseline (min-prerequisite
+      # decision, dev@ 2025-11; 3.10 would pull in Resolver 2.x).
+      # Scoped to the core artifacts this plugin uses; other
+      # org.apache.maven:* artifacts with their own release line are untouched.
+      - dependency-name: "org.apache.maven:maven-core"
+        versions: [">= 3.10.0"]
+      - dependency-name: "org.apache.maven:maven-model"
+        versions: [">= 3.10.0"]
+      - dependency-name: "org.apache.maven:maven-plugin-api"
+        versions: [">= 3.10.0"]
 
   - package-ecosystem: "github-actions"
     directory: "/"