From 0691dd6d0348fb2b720a4c38f8388d01347153ff Mon Sep 17 00:00:00 2001 From: Ernest Provo Date: Sat, 12 Sep 2026 17:04:01 +0000 Subject: [PATCH] chore: disable Dependabot version updates Removes .github/dependabot.yml. Security updates are a separate repository setting and are unaffected -- the CVE signal is kept, the routine version-bump PR volume is not. 30 such PRs were open across the estate, which made the important ones indistinguishable from the noise. Reversible: restore this file to resume version updates. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01HeQhugSBh7GtsDtMeiLaqb --- .github/dependabot.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 0dcf89b..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,29 +0,0 @@ -version: 2 -updates: - # Python dependencies declared in pyproject.toml. - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "weekly" - open-pull-requests-limit: 5 - labels: - - "dependencies" - commit-message: - prefix: "deps" - - # GitHub Actions used by the CI workflows. - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly" - open-pull-requests-limit: 5 - labels: - - "dependencies" - - "ci" - commit-message: - prefix: "ci" - # Batch all github-actions bumps into a single PR to reduce CI churn. - groups: - github-actions: - patterns: - - "*"