From 75415c845dc34008f15677646fe0b1869c77020a Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Wed, 9 Sep 2026 00:12:26 +0100
Subject: [PATCH] chore(dependabot): cap open pull requests per update block

Adds `open-pull-requests-limit` to Dependabot update blocks that had no
cap, following the estate per-ecosystem cap doctrine (task #37).
No other line in the file is touched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk
---
 .github/dependabot.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c9bebb4..c4c12b5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,6 +13,7 @@ updates:
       actions:
         patterns:
           - "*"
+    open-pull-requests-limit: 2
 
   # Rust/Cargo
   - package-ecosystem: "cargo"
@@ -22,6 +23,7 @@ updates:
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-patch"]
+    open-pull-requests-limit: 0
 
   # Elixir/Mix
   - package-ecosystem: "mix"
@@ -36,6 +38,7 @@ updates:
       # paired with call-site updates. Minor + patch flow normally.
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
+    open-pull-requests-limit: 3
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
@@ -48,6 +51,7 @@ updates:
       # paired with call-site updates. Minor + patch flow normally.
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
+    open-pull-requests-limit: 3
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
@@ -60,6 +64,7 @@ updates:
       # paired with call-site updates. Minor + patch flow normally.
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
+    open-pull-requests-limit: 3
   - package-ecosystem: "nix"
     directory: "/"
     schedule: