From 0ba4a19a877aafdb73dc3ee12121ca54f26a45fe Mon Sep 17 00:00:00 2001 From: Brian Carter <254145491+KangaKode@users.noreply.github.com> Date: Sun, 16 Aug 2026 11:19:33 -0400 Subject: [PATCH] chore: disable Dependabot version updates Remove .github/dependabot.yml. Grouped Actions bumps fight pinned gitleaks SHA checks (see #104); pip-audit and SHA pins remain the dependency gates. Re-enable later only with an explicit pin-aware config. Co-authored-by: Cursor --- .github/dependabot.yml | 21 --------------------- 1 file changed, 21 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index b72e32c..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,21 +0,0 @@ -version: 2 -updates: - - package-ecosystem: github-actions - directory: / - schedule: - interval: weekly - day: monday - groups: - github-actions: - patterns: - - "*" - - - package-ecosystem: pip - directory: /core - schedule: - interval: weekly - day: monday - groups: - python-deps: - patterns: - - "*"