diff --git a/.github/workflows/docker-maintenance.yml b/.github/workflows/docker-maintenance.yml
index 61dd1d4..ae01f55 100644
--- a/.github/workflows/docker-maintenance.yml
+++ b/.github/workflows/docker-maintenance.yml
@@ -1,11 +1,17 @@
 # =============================================================================
-# Docker Maintenance — Auto-merge Dependabot PRs (src Dockerfiles)
+# Docker Maintenance — Auto-merge Dependabot PRs (all ecosystems)
 # =============================================================================
-# When Dependabot opens a PR bumping a base image inside:
-#   - src/rabbitmq/Dockerfile        (rabbitmq:*-management)
-#   - src/rabbitmq-init/Dockerfile   (python:3.14-alpine)
-# this workflow auto-approves and merges it (after validation passes), which
-# then triggers docker-release.yml to build and push the updated image.
+# No paths: filter - every Dependabot PR reaches the module and gets an
+# explicit decision and annotation instead of silently staying open. It is
+# merged only after docker-release.yml ran on its head commit and passed:
+#   - docker  src/*/Dockerfile           -> the PR run builds both images
+#   - pip     src/rabbitmq-init/requirements*.txt
+#                                        -> the PR run installs them, runs
+#                                           pytest and builds rabbitmq-init
+#   - docker-compose: the compose files reference images only via
+#     ${VAR:-...}:${VAR:-latest}, which Dependabot cannot update
+#   - github-actions and any other .github/ change stay open (manual merge)
+# Only patch updates are merged (module default for merge-update-types).
 # =============================================================================
 
 name: 🔧 Docker Maintenance
@@ -13,9 +19,6 @@ name: 🔧 Docker Maintenance
 on:
   pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
-    paths:
-      - 'src/rabbitmq/Dockerfile'
-      - 'src/rabbitmq-init/Dockerfile'
 
 permissions:
   contents: write