diff --git a/.github/workflows/test-and-merge.yml b/.github/workflows/test-and-merge.yml
index 4766af207..6c2a26340 100644
--- a/.github/workflows/test-and-merge.yml
+++ b/.github/workflows/test-and-merge.yml
@@ -62,7 +62,7 @@ jobs:
       # will not occur.
       - name: Dependabot metadata
         id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v1.6.0
+        uses: dependabot/fetch-metadata@v2.3.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       # Here the PR gets approved.