diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 49dabfc05..1e0c71cb3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -23,6 +23,9 @@ updates:
       - dependency-name: "org.apache.calcite:calcite-core"
       - dependency-name: "org.apache.calcite:calcite-linq4j"
       - dependency-name: "org.apache.calcite.avatica:avatica-core"
+      # cxf lib updates should not be higher than 3.2
+      - dependency-name: "org.apache.cxf:*"
+        versions: "[3.3,)"
 
   - package-ecosystem: "docker"
     directory: "search-services/packaging/src/docker/"