[han-xudong]

Disable routine Dependabot version-update PRs for every configured ecosystem by setting open-pull-requests-limit to zero. This stops the weekly version-bump backlog and repeated CI builds. Keep existing security update and alert settings, dependency constraints, CodeQL, tests and release workflows unchanged.

Validation: parse the YAML, verify that all configured limits are zero and compare the parsed configuration to the original with only those limits changed. No runtime tests are needed for this configuration-only change; existing required GitHub checks remain enforced.

Reference: https://docs.github.com/en/enterprise-cloud%40latest/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configure-security-updates

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 252e55db-dcc3-498b-9782-ac1f2231adf9

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!