From 01bb73832587f815e8ea0bd538ed18c00bfc5b0a Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 28 Aug 2026 11:34:31 +0000 Subject: [PATCH] Ease Dependabot to monthly, limit 2 Weekly checks with a limit of 5 produced a backlog of routine version-bump PRs on a repository that is marked Stable and is not taking feature work. The published maintenance policy says dependencies here stay pinned unless a security advisory lands, so the previous cadence was generating review work that policy says not to do. Monthly with a limit of 2 matches the hub. Security advisories still surface regardless of interval. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01JkaofZXuUTAovNkveXEDNe --- .github/dependabot.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index dec003d..9f57a91 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,9 +4,9 @@ updates: - package-ecosystem: "pip" directory: "/" schedule: - interval: "weekly" + interval: "monthly" day: "monday" - open-pull-requests-limit: 5 + open-pull-requests-limit: 2 labels: - "dependencies" commit-message: @@ -15,9 +15,9 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "monthly" day: "monday" - open-pull-requests-limit: 5 + open-pull-requests-limit: 2 labels: - "ci" commit-message: