Merge pull request #70 from anynines/update_dependabot_configuration

Updating Dependabot Configuration
anynines · Nov 27, 2023 · 508d33c · 508d33c
2 parents c40b5c8 + 7037c45
commit 508d33c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,14 +3,17 @@ updates:
   - package-ecosystem: "bundler"
     vendor: true
     directory: "/"
-    open-pull-requests-limit: 5
+    # Disable version updates, only security updates
+    open-pull-requests-limit: 0
     schedule:
       interval: weekly
       time: "04:00"
       day: "monday"
       timezone: "Europe/Berlin"
     labels:
       - "unit-test"
+      - "cve"
+      - "dependabot"
     groups:
       all_dependencies:
         patterns: