diff --git a/buildSrc/src/main/kotlin/ai.java-conventions.gradle.kts b/buildSrc/src/main/kotlin/ai.java-conventions.gradle.kts
index 7fef177d84..270fd23995 100644
--- a/buildSrc/src/main/kotlin/ai.java-conventions.gradle.kts
+++ b/buildSrc/src/main/kotlin/ai.java-conventions.gradle.kts
@@ -174,7 +174,11 @@ dependencyCheck {
 
 if (!path.startsWith(":smoke-tests")) {
   configurations.configureEach {
-    if (name.lowercase().endsWith("runtimeclasspath")) {
+    // only lock runtimeClasspath, which is what resolveAndLockAll resolves and
+    // what actually ships; endsWith("runtimeclasspath") also matched
+    // testRuntimeClasspath, which Dependabot resolves and locks even though our
+    // own regeneration task never does
+    if (name == "runtimeClasspath") {
       resolutionStrategy.activateDependencyLocking()
     }
   }