diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e18e1ce737..c89085d97f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,9 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/nuget):"
+  # Only our own label instead of Dependabot's default labels (dependencies + ecosystem, e.g. .NET / javascript)
+  labels:
+    - ":heavy_check_mark: dependencies"
 - package-ecosystem: "dotnet-sdk"
   directory: "/Source"
   ignore:
@@ -18,6 +21,8 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/dotnet-sdk):"
+  labels:
+    - ":heavy_check_mark: dependencies"
 - package-ecosystem: "npm"
   directory: "/Website"
   schedule:
@@ -25,6 +30,8 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/npm):"
+  labels:
+    - ":heavy_check_mark: dependencies"
   groups:
     # react and react-dom must have the exact same version (otherwise the website build fails)
     react:
@@ -42,3 +49,5 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/github-actions):"
+  labels:
+    - ":heavy_check_mark: dependencies"
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index f3f5699aed..4112451fee 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -4,11 +4,12 @@ on:
   pull_request_target:
     types: [opened, reopened]
 
+# Dependabot sets the label itself (labels in .github/dependabot.yml)
 jobs:
   assign-dependencies-label:
     name: Assign dependencies label
     runs-on: ubuntu-latest
-    if: contains(fromJSON('["dependabot[bot]", "transifex-integration[bot]", "imgbot[bot]"]'), github.event.pull_request.user.login)
+    if: contains(fromJSON('["transifex-integration[bot]", "imgbot[bot]"]'), github.event.pull_request.user.login)
     permissions:
       issues: write
       pull-requests: write
diff --git a/AGENTS.md b/AGENTS.md
index 8cd0de9c93..7c142b64fe 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -213,13 +213,14 @@ The website is deployed to GitHub Pages at: https://borntoberoot.net/NETworkMana
   - Build and deploy are separate jobs, only the deploy job (`main` / release) has write access
 
 - **Label / Milestone** (`.github/workflows/label.yml`, `.github/workflows/milestone.yml`):
-  - Label PRs from Dependabot, Transifex and ImgBot as dependencies
+  - Label PRs from Transifex and ImgBot as dependencies (Dependabot sets the label itself)
   - Assign the next-release milestone to PRs from bots and the maintainer
 
 **Automation & Bots**:
 - **Dependabot** (`.github/dependabot.yml`):
   - Weekly updates for NuGet packages, .NET SDK, npm packages and GitHub Actions
-  - Automatic PR creation for dependency updates
+  - Automatic PR creation for dependency updates, labeled `:heavy_check_mark: dependencies` (instead of Dependabot's
+    default labels)
   
 - **Mergify** (`.github/mergify.yml`):
   - Auto-merges PRs with `LGTM` label after AppVeyor CI passes