diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f4cc537..bed5906 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,6 +12,13 @@ updates:
       timezone: Europe/Berlin
     open-pull-requests-limit: 5
     versioning-strategy: increase-if-necessary
+    # Wait before proposing a release: brand-new versions carry the highest risk
+    # of being broken or compromised. Security updates are not delayed.
+    cooldown:
+      default-days: 7
+      semver-major-days: 14
+      semver-minor-days: 7
+      semver-patch-days: 7
     commit-message:
       prefix: 'chore(deps)'
       prefix-development: 'chore(deps-dev)'
@@ -41,6 +48,11 @@ updates:
       # @strapi/sdk-plugin 6.1.1 and typescript-eslint 8 require TypeScript 5.x (< 6.1).
       - dependency-name: 'typescript'
         update-types: ['version-update:semver-major']
+      # Keep the Design System on the version the Strapi admin ships (2.2.x).
+      - dependency-name: '@strapi/design-system'
+        update-types: ['version-update:semver-major', 'version-update:semver-minor']
+      - dependency-name: '@strapi/icons'
+        update-types: ['version-update:semver-major', 'version-update:semver-minor']
   - package-ecosystem: github-actions
     directory: /
     schedule:
@@ -48,6 +60,8 @@ updates:
       day: monday
       time: '06:00'
       timezone: Europe/Berlin
+    cooldown:
+      default-days: 7
     commit-message:
       prefix: 'ci'
     labels: [dependencies]