diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d7ebdbfd..426dc2b0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,6 +9,8 @@ updates:
       open-pull-requests-limit: 0
 
     # Maintain dependencies for Composer
+      ignore:
+        - dependency-name: "yiisoft/*"
     - package-ecosystem: "composer"
       directory: "/"
       schedule:
diff --git a/.github/workflows/bc.yml b/.github/workflows/bc.yml
index ffbd2ed1..5fb60542 100644
--- a/.github/workflows/bc.yml
+++ b/.github/workflows/bc.yml
@@ -13,6 +13,9 @@ on:
 
 name: backwards compatibility
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true