diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index aed28daffb798..2e347ac3f5752 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,8 +18,6 @@ updates:
       - dependency-name: github.com/gravitational/ttlmap
       # TODO(greedy52): Update mongo-driver and fix API changes.
       - dependency-name: go.mongodb.org/mongo-driver
-      # TODO(codingllama): Allow /x/crypto updates after upstream patch.
-      - dependency-name: golang.org/x/crypto
       # Must be kept in-sync with libbpf
       - dependency-name: github.com/aquasecurity/libbpfgo
       # Forked/replaced dependencies
@@ -33,6 +31,7 @@ updates:
       - dependency-name: github.com/pkg/sftp
       - dependency-name: github.com/sirupsen/logrus
       - dependency-name: github.com/vulcand/predicate
+      - dependency-name: golang.org/x/crypto
     open-pull-requests-limit: 10
     reviewers:
       - codingllama
@@ -44,10 +43,10 @@ updates:
     schedule:
       interval: weekly
     ignore:
-      # TODO(codingllama): Allow /x/crypto updates after upstream patch.
-      - dependency-name: golang.org/x/crypto
       # TODO(tross): Update after Firestore is updated
       - dependency-name: google.golang.org/genproto
+      # Forked/replaced dependencies
+      - dependency-name: golang.org/x/crypto
     open-pull-requests-limit: 10
     reviewers:
       - codingllama