diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..08f28b0e
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    commit-message:
+      prefix: chore
+      include: scope
+
+  - package-ecosystem: docker
+    directory: /docs
+    commit-message:
+      prefix: chore
+      include: scope
+    schedule:
+      interval: daily
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6e8493ca..9f1bfc85 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -2,8 +2,12 @@ name: Build .NET
 
 on:
   push:
+    paths:
+      - "libraries/**"
     branches: [develop, main]
   pull_request:
+    paths:
+      - "libraries/**"
     branches: [develop, main]
 
 defaults:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 807f7777..33176af4 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -2,9 +2,12 @@ name: "CodeQL"
 
 on:
   push:
+    paths:
+      - "libraries/**"
     branches: [ "develop", main ]
   pull_request:
-    # The branches below must be a subset of the branches above
+    paths:
+      - "libraries/**"
     branches: [ "develop" ]
   schedule:
     - cron: '42 8 * * 0'
diff --git a/docs/Dockerfile b/docs/Dockerfile
index 7bf267f4..5f90260a 100644
--- a/docs/Dockerfile
+++ b/docs/Dockerfile
@@ -1,2 +1,3 @@
-FROM squidfunk/mkdocs-material
+# v9.1.18
+FROM squidfunk/mkdocs-material@sha256:41942f7a2f5163aacd0e866e076d95db4f26550b97d76c1594c04250cbb580e9
 RUN pip install mkdocs-git-revision-date-plugin