chore(dependabot): cap open pull requests per update block

[hyperpolymath]

Adds open-pull-requests-limit to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched.

Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk

Summary

Changes

RSR Quality Checklist

Required

• Tests pass (just test or equivalent)
• Code is formatted (just fmt or equivalent)
• Linter is clean (no new warnings or errors)
• No banned language patterns (no TypeScript, no npm/bun, no Go/Python)
• No unsafe blocks without // SAFETY: comments
• No banned functions (believe_me, unsafeCoerce, Obj.magic, Admitted, sorry)
• SPDX license headers present on all new/modified source files
• No secrets, credentials, or .env files included

As Applicable

• .machine_readable/STATE.a2ml updated (if project state changed)
• .machine_readable/ECOSYSTEM.a2ml updated (if integrations changed)
• .machine_readable/META.a2ml updated (if architectural decisions changed)
• Documentation updated for user-facing changes
• TOPOLOGY.md updated (if architecture changed)
• CHANGELOG or release notes updated
• New dependencies reviewed for license compatibility (MPL-2.0 / MPL-2.0)
• ABI/FFI changes validated (src/interface/abi/ and src/interface/ffi/ consistent)

Testing

Screenshots

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: ad5e7d02-3c54-4a82-ae79-4add5fc5675c

📥 Commits

Reviewing files that changed from the base of the PR and between 88a01a5 and c9c35b5.

📒 Files selected for processing (2)

• .github/dependabot.yml
• satellites/a2mliser/.github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (16)

• GitHub Check: Dogfooding compliance summary
• GitHub Check: governance / Licence consistency
• GitHub Check: scan / gitleaks
• GitHub Check: scan / shell-secrets
• GitHub Check: governance / Trusted-base reduction policy
• GitHub Check: governance / Workflow security linter
• GitHub Check: governance / Security policy checks
• GitHub Check: governance / Check Workflow Staleness
• GitHub Check: governance / Guix primary / Nix fallback policy
• GitHub Check: governance / Code quality + docs
• GitHub Check: scan / Hypatia Neurosymbolic Analysis
• GitHub Check: rust-ci / Detect Cargo.toml
• GitHub Check: Hypatia neurosymbolic scan
• GitHub Check: analyze (actions, none)
• GitHub Check: ABI ↔ FFI structural conformance
• GitHub Check: Zig FFI builds + tests (Zig 0.14.0)

🔇 Additional comments (2)

.github/dependabot.yml (1)

16-16: LGTM!

Also applies to: 26-26, 33-33, 40-40, 47-47

satellites/a2mliser/.github/dependabot.yml (1)

49-54: 🎯 Functional Correctness

The Nix block matches the repository’s root Dependabot configuration, which also omits open-pull-requests-limit. No repository guidance requires an explicit limit for every update block. The comment does not establish a functional defect or a required exception document.

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Limited the number of simultaneously open automated dependency update pull requests across supported package ecosystems.
  • Disabled automated Cargo dependency pull requests.

Walkthrough

The pull request adds open-pull-requests-limit values to Dependabot configurations in the root repository and the a2mliser satellite. GitHub Actions, Mix, npm, and pip receive caps. Cargo receives a limit of zero.

Changes

Dependabot pull request limits

Layer / File(s)	Summary
Configure ecosystem limits .github/dependabot.yml, satellites/a2mliser/.github/dependabot.yml	Both configurations limit GitHub Actions to 2 open pull requests, Cargo to 0, and Mix, npm, and pip to 3 each.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 1d54b

The configured Dependabot limits match the stated change scope, with no actionable merge risk identified.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description states the intent, but the required template remains largely incomplete. The Summary and Changes sections contain no content, all checklist items are unchecked, and the Testing section…	Complete the Summary and Changes sections, mark applicable checklist items, and describe the testing performed. Add screenshots or terminal output if applicable.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: capping open Dependabot pull requests per update block.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description states the intent, but the required template remains largely incomplete. The Summary and Changes sections contain no content, all checklist items are unchecked, and the Testing section is empty.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the update queue
Two action hops are allowed through
Cargo waits at zero
Three herbs grow in each row
Dependabot keeps the burrow neat}

_{Comment @coderabbitai help to get the list of available commands.}