diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6e63aaf..9fdf6ef 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,17 +1,21 @@
-# java4fun → 放到 .github/dependabot.yml
-version: 2
-updates:
-  - package-ecosystem: "maven"
-    directory: "/html2md"   # 现有 PR 路径确认（Bump ... in /html2md）
-    schedule:
-      interval: "weekly"
-    groups:
-      all-dependencies:
-        patterns: ["*"]
-    open-pull-requests-limit: 10
-    # 挡住 Spring Boot 的 major 自动升级：2.7.x → 4.x 属破坏性变更
-    # （starter-aop 在 4.x 被重命名为 starter-aspectj，且需 Java 17 + Jakarta 命名空间）
-    # 仅允许 minor/patch 范围内的安全更新
-    ignore:
-      - dependency-name: "org.springframework.boot:spring-boot*"
-        update-types: ["version-update:semver-major"]
+# java4fun → 放到 .github/dependabot.yml
+version: 2
+updates:
+  - package-ecosystem: "maven"
+    directory: "/html2md"   # 现有 PR 路径确认（Bump ... in /html2md）
+    schedule:
+      interval: "weekly"
+    groups:
+      all-dependencies:
+        patterns: ["*"]
+    open-pull-requests-limit: 10
+    # 挡住 Spring Boot 的 major 自动升级：2.7.x → 4.x 属破坏性变更
+    # （starter-aop 在 4.x 被重命名为 starter-aspectj，且需 Java 17 + Jakarta 命名空间）
+    # 仅允许 minor/patch 范围内的安全更新
+    ignore:
+      - dependency-name: "org.springframework.boot:spring-boot*"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "org.htmlunit:htmlunit"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "com.jayway.jsonpath:json-path"
+        update-types: ["version-update:semver-major"]
diff --git a/html2md/pom.xml b/html2md/pom.xml
index a652487..f8ef205 100644
--- a/html2md/pom.xml
+++ b/html2md/pom.xml
@@ -41,7 +41,7 @@
         <dependency>
             <groupId>org.htmlunit</groupId>
             <artifactId>htmlunit</artifactId>
-            <version>5.4.0</version>
+            <version>4.21.0</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/org.apache.james/apache-mime4j -->
@@ -71,7 +71,7 @@
         <dependency>
             <groupId>com.jayway.jsonpath</groupId>
             <artifactId>json-path</artifactId>
-            <version>3.0.0</version>
+            <version>2.10.0</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/cn.wanghaomiao/JsoupXpath -->