mirror of
https://github.com/RayLabsHQ/gitea-mirror.git
synced 2026-11-05 16:52:22 +01:00
Without a dependabot.yml, security update jobs ran the npm ecosystem over the root, which cannot update bun.lock, so every one of them failed. The root now uses the bun ecosystem and the documentation site keeps npm (it is locked with pnpm). open-pull-requests-limit is 0 for both, which turns off version update pull requests and leaves security updates on, as before.