From 9fa60ded42031a1a0dfd6dfbc8c6562a0f8f15bd Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Tue, 12 May 2026 23:11:05 +0200
Subject: [PATCH] ci(dependabot): restore cargo PR limit so security + version
 PRs flow

Aligns with hyperpolymath/rsr-template-repo#37: open-pull-requests-limit: 0
empirically suppressed Dependabot SECURITY PRs in addition to version
updates. Restoring limit: 10 with grouped minor/patch updates to keep
noise contained while letting security advisories flow.
---
 .github/dependabot.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 75ac97c..de2e46d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -30,7 +30,14 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-    open-pull-requests-limit: 0
+    open-pull-requests-limit: 10
+    groups:
+      cargo:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
 
   # Elixir/Mix
   - package-ecosystem: "mix"
@@ -54,4 +61,4 @@ updates:
   - package-ecosystem: "nix"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "weekly"
\ No newline at end of file