From b6fbb6c450c4572f2cc3d8241708170a0283a95b Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Wed, 9 Sep 2026 00:15:32 +0100
Subject: [PATCH] chore(dependabot): cap open pull requests per update block

Adds `open-pull-requests-limit` to Dependabot update blocks that had no
cap, following the estate per-ecosystem cap doctrine (task #37).
No other line in the file is touched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk
---
 .github/dependabot.yml                    | 1 +
 nesy/.github/dependabot.yml               | 2 ++
 rescript-templater/.github/dependabot.yml | 1 +
 voyant-export/.github/dependabot.yml      | 2 ++
 zoterho-template/.github/dependabot.yml   | 4 ++++
 zotpress/.github/dependabot.yml           | 2 ++
 6 files changed, 12 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b00bfd0..49ebfe5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,3 +8,4 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
diff --git a/nesy/.github/dependabot.yml b/nesy/.github/dependabot.yml
index 83724c1..8821698 100644
--- a/nesy/.github/dependabot.yml
+++ b/nesy/.github/dependabot.yml
@@ -9,7 +9,9 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 3
diff --git a/rescript-templater/.github/dependabot.yml b/rescript-templater/.github/dependabot.yml
index 5145419..b41b7b8 100644
--- a/rescript-templater/.github/dependabot.yml
+++ b/rescript-templater/.github/dependabot.yml
@@ -9,6 +9,7 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
   - package-ecosystem: "nix"
     directory: "/"
     schedule:
diff --git a/voyant-export/.github/dependabot.yml b/voyant-export/.github/dependabot.yml
index 83724c1..8821698 100644
--- a/voyant-export/.github/dependabot.yml
+++ b/voyant-export/.github/dependabot.yml
@@ -9,7 +9,9 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 3
diff --git a/zoterho-template/.github/dependabot.yml b/zoterho-template/.github/dependabot.yml
index 72c2097..89c0c47 100644
--- a/zoterho-template/.github/dependabot.yml
+++ b/zoterho-template/.github/dependabot.yml
@@ -8,6 +8,7 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
   
   - package-ecosystem: "cargo"
     directory: "/"
@@ -16,13 +17,16 @@ updates:
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-patch"]
+    open-pull-requests-limit: 0
   
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 3
   
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 3
diff --git a/zotpress/.github/dependabot.yml b/zotpress/.github/dependabot.yml
index 76e2dab..bc5318d 100644
--- a/zotpress/.github/dependabot.yml
+++ b/zotpress/.github/dependabot.yml
@@ -13,7 +13,9 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
+    open-pull-requests-limit: 3