This is an automated email from the ASF dual-hosted git repository. sjanc pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mynewt-newtmgr.git
commit 772d11e8711d34f599d54bb14a9d935b56e11656 Author: Szymon Janc <[email protected]> AuthorDate: Sat Oct 24 17:35:09 2026 +0200 ci: Limit Dependabot Go module PRs to security updates Set open-pull-requests-limit to 0 for the gomod ecosystem. This disables regular version update PRs while security update PRs are still raised. The go-modules group now applies to security updates so that multiple security fixes land in a single PR. Assisted-by: Claude:claude-opus-5-5 --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b96663c..a72743c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -30,13 +30,17 @@ updates: patterns: - "*" + # Security updates only: a zero limit disables version update PRs, + # security update PRs are not affected by it. - package-ecosystem: "gomod" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 0 commit-message: prefix: "deps" groups: go-modules: + applies-to: security-updates patterns: - "*"
