diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index e84cc48..79abe52 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -8,5 +8,5 @@ updates:
       - "/go/setup"
       - "/go/unit-test"
     schedule:
-      # Check for updates to GitHub Actions every week
-      interval: "weekly"
\ No newline at end of file
+      # Check for updates to GitHub Actions every quarter
+      interval: "quarterly"
diff --git a/README.md b/README.md
index 581a4b7..dd8288c 100644
--- a/README.md
+++ b/README.md
@@ -27,4 +27,4 @@ They complement the composite actions above.
 
 [Release process](docs/releases.md) describes this repository's Release Please
 workflow and version tags. Consumer applications keep their own release versions.
-External actions are pinned to verified release SHAs; Dependabot checks them weekly.
+External actions are pinned to verified release SHAs; Dependabot checks them quarterly.