chore(dependabot): pause version-update PRs until the Sept allowance reset

[charlieijk]

Dependabot itself runs on free runners, but every PR it opens or rebases fires ci.yml on billable Linux minutes. With 165 Dependabot PRs open across the fleet and ~$8 of Actions budget left until the Sept 1 allowance reset, each merge to main triggers a rebase storm that burns real money on dependency bumps.

This sets open-pull-requests-limit: 0 on every update entry: no new version-update PRs and no rebases of the existing ones. The open PRs stay open, untouched, to triage later. Security updates are unaffected (they are controlled by repo settings, not this file). Committed with [skip ci] so this PR itself costs no minutes.

Revert by restoring the previous limits when the September allowance lands.

Summary by CodeRabbit

• Chores
  • Disabled automatic Dependabot pull request creation for configured dependency update sources.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 042de76f-569a-4e6c-823e-4890e3af1bc3

📥 Commits

Reviewing files that changed from the base of the PR and between 2f53822 and 901c9eb.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 10 included reviews per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Dependabot configuration sets open-pull-requests-limit: 0 for six update groups covering Go, npm, Python, and GitHub Actions.

Changes

Dependabot configuration

Layer / File(s)	Summary
Disable open pull requests .github/dependabot.yml	All six Dependabot update configurations set the open pull request limit to zero.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 901c9

This localized configuration change pauses Dependabot version-update PRs without introducing an actionable merge-blocking risk; it is merge-ready after normal checks and review.

Poem

I’m a rabbit with a tidy plan,
Six update queues now pause their span.
Go and npm, Python too,
Actions wait in silence blue.
One small setting, neatly done.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes pausing Dependabot version-update PRs until the September allowance reset.
Description check	✅ Passed	The description clearly explains the change, reason, impact, unaffected security updates, CI consideration, and rollback plan, but omits the template headings and verification checklist.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/pause-dependabot

Warning

Review ran into problems

🔥 Problems

Errors were encountered while retrieving linked issues.

Errors (1)

• LINEAR integration encountered authorization issues. Please disconnect and reconnect the integration in the CodeRabbit UI.

---

_{Comment @coderabbitai help to get the list of available commands.}