diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c11f1d976..6c651bfb5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,72 +1,83 @@
 version: 2
 updates:
+  - package-ecosystem: gradle
+    directory: "/"
+    schedule:
+      interval: weekly
+      time: "10:00"
+      timezone: Europe/London
+    open-pull-requests-limit: 10
+    labels:
+      - "type/dependencies"
+      - "scope/backend"
+    groups:
+      spring-boot-dependencies:
+        patterns:
+          - "org.springframework.boot:*"
+          - "io.spring.dependency-management"
+        # We will handle major upgrades manually
+        update-types:
+          - "patch"
+          - "minor"
+      confluent-minor-patch-dependencies:
+        patterns:
+          - "io.confluent:*"
+          - "org.apache.kafka:*"
+        update-types:
+          - "patch"
+          - "minor"
+      confluent-major-upgrade:
+        patterns:
+          - "io.confluent:*"
+          - "org.apache.kafka:*"
+        update-types:
+          - "major"
+      other-dependencies:
+        patterns:
+          - "*"
+        update-types:
+          - "patch"
+          - "minor"
+  - package-ecosystem: docker
+    directory: "/api"
+    schedule:
+      interval: weekly
+      time: "10:00"
+      timezone: Europe/London
+    open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "azul/zulu-openjdk-alpine"
+        update-types: ["version-update:semver-major"]
+    labels:
+      - "type/dependencies"
+      - "scope/backend"
 
-- package-ecosystem: gradle
-  directory: "/"
-  schedule:
-    interval: weekly
-    time: "10:00"
-    timezone: Europe/London
-  open-pull-requests-limit: 10
-  labels:
-    - "type/dependencies"
-    - "scope/backend"
-  groups:
-    spring-boot-dependencies:
-      patterns:
-        - "org.springframework.boot:*"
-        - "io.spring.dependency-management"
-      # We will handle major upgrades manually
-      update-types:
-        - "patch"
-        - "minor"
-    other-dependencies:
-      patterns:
-        - "*"
-      update-types:
-        - "patch"
-        - "minor"
+  - package-ecosystem: npm
+    directory: "/frontend"
+    schedule:
+      interval: weekly
+      time: "10:00"
+      timezone: Europe/London
+    open-pull-requests-limit: 10
+    versioning-strategy: increase-if-necessary
+    labels:
+      - "type/dependencies"
+      - "scope/frontend"
+    groups:
+      pnpm-dependencies:
+        patterns:
+          - "*"
+        update-types:
+          - "patch"
+          - "minor"
 
-- package-ecosystem: docker
-  directory: "/api"
-  schedule:
-    interval: weekly
-    time: "10:00"
-    timezone: Europe/London
-  open-pull-requests-limit: 10
-  ignore:
-  - dependency-name: "azul/zulu-openjdk-alpine"
-    update-types: ["version-update:semver-major"]
-  labels:
-    - "type/dependencies"
-    - "scope/backend"
-
-- package-ecosystem: npm
-  directory: "/frontend"
-  schedule:
-    interval: weekly
-    time: "10:00"
-    timezone: Europe/London
-  open-pull-requests-limit: 10
-  versioning-strategy: increase-if-necessary
-  labels:
-    - "type/dependencies"
-    - "scope/frontend"
-  groups:
-    pnpm-dependencies:
-      patterns:
-        - "*"
-      update-types:
-        - "patch"
-        - "minor"
-
-- package-ecosystem: "github-actions"
-  directory: "/"
-  schedule:
-    interval: weekly
-    time: "10:00"
-    timezone: Europe/London
-  open-pull-requests-limit: 10
-  labels:
-    - "type/dependencies"
-    - "scope/infra"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: weekly
+      time: "10:00"
+      timezone: Europe/London
+    open-pull-requests-limit: 10
+    labels:
+      - "type/dependencies"
+      - "scope/infra"
diff --git a/.github/workflows/docker_build.yml b/.github/workflows/docker_build.yml
index 35ecc5390..bac858bb6 100644
--- a/.github/workflows/docker_build.yml
+++ b/.github/workflows/docker_build.yml
@@ -24,7 +24,7 @@ jobs:
           token: ${{ github.token }}
 
       - name: Download artifacts
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # infered from @v4
         with:
           name: kafbat-ui-${{ inputs.version }}
           path: api/build/libs
diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index a71a3652b..d6185c3e3 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
 
       - name: Download docker image
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # infered from @v4
         with:
           name: image
           path: /tmp
diff --git a/.github/workflows/e2e-run.yml b/.github/workflows/e2e-run.yml
index 954ae62c3..d24afdbbb 100644
--- a/.github/workflows/e2e-run.yml
+++ b/.github/workflows/e2e-run.yml
@@ -83,13 +83,13 @@ jobs:
           cache: 'gradle'
 
       - name: Download build artifacts
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # infered from @v4
         with:
           name: artifacts
           path: api/build
 
       - name: Download docker image
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # infered from @v4
         with:
           name: image
           path: /tmp
@@ -141,7 +141,7 @@ jobs:
     if: ${{ !cancelled() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
     steps:
       - name: Download allure reports artifact
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # infered from @v4
         with:
           name: reports
           path: ./e2e-tests/build/allure-results