diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..916eca9
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "github-actions"
+
+  - package-ecosystem: "devcontainers"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    exclude-paths:
+      - "tests/**"
+    labels:
+      - "dependencies"
+      - "devcontainers"
diff --git a/.github/workflows/golden-output.yml b/.github/workflows/golden-output.yml
index 245decb..a4cd80d 100644
--- a/.github/workflows/golden-output.yml
+++ b/.github/workflows/golden-output.yml
@@ -10,20 +10,15 @@ permissions:
 jobs:
   verify-golden-output:
     name: Verify golden output
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     environment: maintainer-approval
 
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.x"
-
-      - name: Install Ansible
-        run: python -m pip install ansible
+      - name: Show Ansible version
+        run: ansible-playbook --version
 
       - name: Render golden output
         run: make test
diff --git a/group_vars/all.example.yml b/group_vars/all.example.yml
index 2e312a6..5429059 100644
--- a/group_vars/all.example.yml
+++ b/group_vars/all.example.yml
@@ -65,4 +65,3 @@ devcontainers:
     install: |
       sudo apt update
       sudo apt install -y --no-install-recommends ansible
-      echo "foobar"
diff --git a/tests/golden_output b/tests/golden_output
index db779fb..4acf737 100644
--- a/tests/golden_output
+++ b/tests/golden_output
@@ -78,7 +78,6 @@ curl -sL -o cfr.jar 'https://www.benf.org/other/cfr/cfr-0.152.jar'
 #!/bin/bash
 sudo apt update
 sudo apt install -y --no-install-recommends ansible
-echo "foobar"
 {
 	// Managed by devcontainer-sync. Edit group_vars/all.yml instead.
 	"name": "rust-example",
diff --git a/tests/python-example/.devcontainer/install.sh b/tests/python-example/.devcontainer/install.sh
index d7a71ab..f114e0d 100755
--- a/tests/python-example/.devcontainer/install.sh
+++ b/tests/python-example/.devcontainer/install.sh
@@ -1,4 +1,3 @@
 #!/bin/bash
 sudo apt update
 sudo apt install -y --no-install-recommends ansible
-echo "foobar"