Dependabot pull requests (both security updates and version updates) have been temporarily disabled.
Currently, security updates are only created against the default branch. While version updates can be configured for additional branches, our forward-merging strategy means that enabling Dependabot across multiple branches would generate a high number of duplicate pull requests for the same dependency changes.
This creates unnecessary noise and overhead in reviewing and managing PRs.
Until we find a better configuration or workflow that avoids duplication, Dependabot PRs will remain disabled.
Dependabot pull requests (both security updates and version updates) have been temporarily disabled.
Currently, security updates are only created against the default branch. While version updates can be configured for additional branches, our forward-merging strategy means that enabling Dependabot across multiple branches would generate a high number of duplicate pull requests for the same dependency changes.
This creates unnecessary noise and overhead in reviewing and managing PRs.
Until we find a better configuration or workflow that avoids duplication, Dependabot PRs will remain disabled.