diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 25f8623..cafa545 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -15,11 +15,11 @@ updates:
     rebase-strategy: "auto"
     groups:
       production-dependencies:
-        dependency-type: "direct:production"
+        dependency-type: "production"
         patterns:
           - "*"
       development-dependencies:
-        dependency-type: "direct:development"
+        dependency-type: "development"
         patterns:
           - "*"
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 46ecb93..784aaf5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,6 +16,7 @@ concurrency:
 jobs:
   verify:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
 
     steps:
       - name: Check out repository
@@ -30,8 +31,5 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Lint
-        run: npm run lint
-
-      - name: Run tests
-        run: npm run test:ci
+      - name: Verify lockfile remains unchanged
+        run: git diff --exit-code -- package-lock.json