chore(deps): restrict Dependabot to security updates only (#918)

Disable scheduled version-update PRs (open-pull-requests-limit: 0). Keep
grouped security PRs per ecosystem; symphonia migration ignores unchanged.
This commit is contained in:
cucadmuh
2026-05-29 23:19:18 +03:00
committed by GitHub
parent 5e5f395d1d
commit c0d7079e88
2 changed files with 22 additions and 5 deletions
+1 -1
View File
@@ -25,4 +25,4 @@ Include what you can: affected version, platform (Windows / macOS / Linux), step
## Secure development
Pull requests are reviewed on `main`. Dependency updates are tracked via Dependabot. For general contribution expectations, see [CONTRIBUTING.md](CONTRIBUTING.md).
Pull requests are reviewed on `main`. **Dependency security updates** are tracked via Dependabot (PRs only for reported vulnerabilities and their fix paths—not routine version bumps). For general contribution expectations, see [CONTRIBUTING.md](CONTRIBUTING.md).