diff --git a/ci/dependabot-updater.sh b/ci/dependabot-updater.sh
index be3cc716b1..98c95d1c49 100755
--- a/ci/dependabot-updater.sh
+++ b/ci/dependabot-updater.sh
@@ -13,9 +13,11 @@ parsed_update_args="$(
 package=$(echo "$parsed_update_args" | awk '{print $2}' | grep -o "^[^:]*")
 if [[ -n $parsed_update_args ]]; then
   # shellcheck disable=SC2086
-  _ scripts/cargo-for-all-lock-files.sh \
-    "$(git grep --files-with-matches "$package" :**/Cargo.lock)" -- \
-    update $parsed_update_args
+  for lock in $(git grep --files-with-matches --fixed-strings "$package" :**/Cargo.lock); do
+    _ scripts/cargo-for-all-lock-files.sh \
+      "$lock" -- \
+      update $parsed_update_args
+  done
 fi
 
 echo --- ok