Disable automatic version updates from dependabot (#2246)

This commit is contained in:
Alex Janousek
2026-03-02 13:56:56 -05:00
committed by GitHub
parent 931c7791ba
commit 776a33a9e3

View File

@@ -3,16 +3,19 @@
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
# Note: Setting open-pull-requests-limit to 0 disables automatic version update PRs.
# Security updates are still active and managed separately in repository settings under
# "Security & analysis" > "Dependabot security updates"
version: 2
updates:
- package-ecosystem: "pip" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "daily"
open-pull-requests-limit: 0 # Disable version update PRs; security updates still active
labels:
- "dependabot" # Custom label to identify Dependabot PRs
assignees:
- "alexjanousekGSA"
ignore:
# gevent 25.8+ breaks Celery/Kombu compatibility (potentially)
- dependency-name: "gevent"