chore(dependabot): cap open pull requests per update block

[hyperpolymath]

Adds open-pull-requests-limit to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched.

Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk

Summary

Closes #

Type of change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ New feature (non-breaking change that adds functionality)
• 💥 Breaking change (would change existing behaviour)
• 🕳️ Soundness fix (fixes a checker/proof false-negative)
• 📖 Documentation
• 🧹 Refactor / tech debt (behaviour-preserving)
• ⚡ Performance
• 🔧 Build / CI / tooling

How has this been verified?

Checklist

• My commits are signed (git commit -S).
• I ran the project's own checks/tests locally and they pass.
• New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
  prose CC-BY-SA-4.0); I did not relicense existing files.
• Docs are updated, and no public claim now overstates what the code does.
• I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: f562f6cd-acb3-4101-abeb-ee6f927d9253

📥 Commits

Reviewing files that changed from the base of the PR and between f58567f and d1f8123.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (10)

• GitHub Check: governance / Exemption ratchet
• GitHub Check: governance / Licence consistency
• GitHub Check: governance / Trusted-base reduction policy
• GitHub Check: governance / Check Workflow Staleness
• GitHub Check: governance / Debt ratchet
• GitHub Check: governance / Security policy checks
• GitHub Check: hypatia / Hypatia Neurosymbolic Analysis
• GitHub Check: governance / Allowlist Preflight
• GitHub Check: governance / Workflow security linter
• GitHub Check: Analyze (javascript-typescript)

🔇 Additional comments (1)

.github/dependabot.yml (1)

12-12: LGTM!

Also applies to: 17-17

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Limited the number of simultaneous automated dependency update pull requests for GitHub Actions to two.
  • Limited the number of simultaneous automated dependency update pull requests for Mix packages to three.

Walkthrough

The Dependabot configuration now limits open pull requests to two for GitHub Actions updates and three for Mix updates.

Changes

Dependabot limits

Layer / File(s)	Summary
Set ecosystem pull request limits .github/dependabot.yml	The github-actions update block allows up to 2 open pull requests. The mix update block allows up to 3.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: metadatastician

Merge Risk: ⚪ Minimal · up to f5cb2

The intended Dependabot caps are configured for GitHub Actions and Mix without introducing an actionable merge risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: limiting Dependabot pull requests per update block.
Description check	✅ Passed	The description is related to the changeset and explains the per-ecosystem Dependabot pull request limits.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit counts the updates in line
Two for Actions, three for Mix shine
Dependabot keeps the queue neat
Fewer open changes hop to meet
The config now bounds each fleet neat}

_{Comment @coderabbitai help to get the list of available commands.}