From d7a301da4e5ab5a649ab47174122a09a25e044e9 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 9 Sep 2026 00:14:55 +0100 Subject: [PATCH] chore(dependabot): cap open pull requests per update block Adds `open-pull-requests-limit` to Dependabot update blocks that had no cap, following the estate per-ecosystem cap doctrine (task #37). No other line in the file is touched. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_011eQ7hibx92N7fBDtwgReWk --- .github/dependabot.yml | 1 + 0-ai-gatekeeper-protocol/.github/dependabot.yml | 5 +++++ meta-a2ml/.github/dependabot.yml | 1 + rhodium-standard-repositories/.github/dependabot.yml | 1 + .../satellites/ECOSYSTEM.scm/.github/dependabot.yml | 1 + .../satellites/META.scm/.github/dependabot.yml | 1 + .../satellites/cccp/.github/dependabot.yml | 5 +++++ .../nextgen-languages/7-tentacles/.github/dependabot.yml | 1 + .../cccp/satellites/php-aegis/.github/dependabot.yml | 4 ++++ .../cccp/satellites/sanctify-php/.github/dependabot.yml | 4 ++++ .../satellites/mustfile/.github/dependabot.yml | 5 +++++ .../satellites/palimpsest-license/.github/dependabot.yml | 2 ++ .../satellites/robot-repo-automaton/.github/dependabot.yml | 4 ++++ .../satellites/rsr-certifier/.github/dependabot.yml | 1 + .../satellites/rsr-deployer/.github/dependabot.yml | 5 +++++ .../satellites/state.scm/.github/dependabot.yml | 1 + .../satellites/well-known-ecosystem/.github/dependabot.yml | 1 + 17 files changed, 43 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bd5c3408a..978e55db5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,6 +9,7 @@ updates: groups: actions: patterns: ["*"] + open-pull-requests-limit: 2 # github-actions major bumps are usually safe — the SHA pin is the real # version. Standards repo is the canonical-template host so we want the # PRs fast (daily) and grouped. If a specific action proves unstable on diff --git a/0-ai-gatekeeper-protocol/.github/dependabot.yml b/0-ai-gatekeeper-protocol/.github/dependabot.yml index d5cd4e996..b4d5ec67a 100644 --- a/0-ai-gatekeeper-protocol/.github/dependabot.yml +++ b/0-ai-gatekeeper-protocol/.github/dependabot.yml @@ -13,6 +13,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 # Rust/Cargo - package-ecosystem: "cargo" @@ -22,24 +23,28 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 # Elixir/Mix - package-ecosystem: "mix" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Node.js/npm - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Python/pip - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Nix flakes - package-ecosystem: "nix" diff --git a/meta-a2ml/.github/dependabot.yml b/meta-a2ml/.github/dependabot.yml index 739b86073..fa4475f91 100644 --- a/meta-a2ml/.github/dependabot.yml +++ b/meta-a2ml/.github/dependabot.yml @@ -9,3 +9,4 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 diff --git a/rhodium-standard-repositories/.github/dependabot.yml b/rhodium-standard-repositories/.github/dependabot.yml index 5145419ca..b41b7b872 100644 --- a/rhodium-standard-repositories/.github/dependabot.yml +++ b/rhodium-standard-repositories/.github/dependabot.yml @@ -9,6 +9,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "nix" directory: "/" schedule: diff --git a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/dependabot.yml b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/dependabot.yml index 0645eafdb..0ff1c4cfc 100644 --- a/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/ECOSYSTEM.scm/.github/dependabot.yml @@ -9,3 +9,4 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 diff --git a/rhodium-standard-repositories/satellites/META.scm/.github/dependabot.yml b/rhodium-standard-repositories/satellites/META.scm/.github/dependabot.yml index 0645eafdb..0ff1c4cfc 100644 --- a/rhodium-standard-repositories/satellites/META.scm/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/META.scm/.github/dependabot.yml @@ -9,3 +9,4 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 diff --git a/rhodium-standard-repositories/satellites/cccp/.github/dependabot.yml b/rhodium-standard-repositories/satellites/cccp/.github/dependabot.yml index d5cd4e996..b4d5ec67a 100644 --- a/rhodium-standard-repositories/satellites/cccp/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/cccp/.github/dependabot.yml @@ -13,6 +13,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 # Rust/Cargo - package-ecosystem: "cargo" @@ -22,24 +23,28 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 # Elixir/Mix - package-ecosystem: "mix" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Node.js/npm - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Python/pip - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Nix flakes - package-ecosystem: "nix" diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/dependabot.yml b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/dependabot.yml index 5145419ca..b41b7b872 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/nextgen-languages/7-tentacles/.github/dependabot.yml @@ -9,6 +9,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "nix" directory: "/" schedule: diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/dependabot.yml b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/dependabot.yml index 72c209756..89c0c4755 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/php-aegis/.github/dependabot.yml @@ -8,6 +8,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "cargo" directory: "/" @@ -16,13 +17,16 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 diff --git a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/dependabot.yml b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/dependabot.yml index 72c209756..89c0c4755 100644 --- a/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/cccp/satellites/sanctify-php/.github/dependabot.yml @@ -8,6 +8,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "cargo" directory: "/" @@ -16,13 +17,16 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 diff --git a/rhodium-standard-repositories/satellites/mustfile/.github/dependabot.yml b/rhodium-standard-repositories/satellites/mustfile/.github/dependabot.yml index d5cd4e996..b4d5ec67a 100644 --- a/rhodium-standard-repositories/satellites/mustfile/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/mustfile/.github/dependabot.yml @@ -13,6 +13,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 # Rust/Cargo - package-ecosystem: "cargo" @@ -22,24 +23,28 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 # Elixir/Mix - package-ecosystem: "mix" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Node.js/npm - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Python/pip - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Nix flakes - package-ecosystem: "nix" diff --git a/rhodium-standard-repositories/satellites/palimpsest-license/.github/dependabot.yml b/rhodium-standard-repositories/satellites/palimpsest-license/.github/dependabot.yml index 29bbc17ea..f9f73bdbd 100644 --- a/rhodium-standard-repositories/satellites/palimpsest-license/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/palimpsest-license/.github/dependabot.yml @@ -10,6 +10,7 @@ updates: dependencies: patterns: - "*" + open-pull-requests-limit: 2 # 2. Maintain Rust (cargo) - package-ecosystem: "cargo" @@ -20,6 +21,7 @@ updates: dependencies: patterns: - "*" + open-pull-requests-limit: 0 # 3. Maintain NPM (if you have package.json) - package-ecosystem: "deno" diff --git a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/dependabot.yml b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/dependabot.yml index 72c209756..89c0c4755 100644 --- a/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/robot-repo-automaton/.github/dependabot.yml @@ -8,6 +8,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "cargo" directory: "/" @@ -16,13 +17,16 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 diff --git a/rhodium-standard-repositories/satellites/rsr-certifier/.github/dependabot.yml b/rhodium-standard-repositories/satellites/rsr-certifier/.github/dependabot.yml index 1c2d34719..4593e59b1 100644 --- a/rhodium-standard-repositories/satellites/rsr-certifier/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/rsr-certifier/.github/dependabot.yml @@ -22,6 +22,7 @@ updates: - "ci" commit-message: prefix: "chore(ci)" + open-pull-requests-limit: 2 # Docker - package-ecosystem: "docker" diff --git a/rhodium-standard-repositories/satellites/rsr-deployer/.github/dependabot.yml b/rhodium-standard-repositories/satellites/rsr-deployer/.github/dependabot.yml index d5cd4e996..b4d5ec67a 100644 --- a/rhodium-standard-repositories/satellites/rsr-deployer/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/rsr-deployer/.github/dependabot.yml @@ -13,6 +13,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 # Rust/Cargo - package-ecosystem: "cargo" @@ -22,24 +23,28 @@ updates: ignore: - dependency-name: "*" update-types: ["version-update:semver-patch"] + open-pull-requests-limit: 0 # Elixir/Mix - package-ecosystem: "mix" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Node.js/npm - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Python/pip - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + open-pull-requests-limit: 3 # Nix flakes - package-ecosystem: "nix" diff --git a/rhodium-standard-repositories/satellites/state.scm/.github/dependabot.yml b/rhodium-standard-repositories/satellites/state.scm/.github/dependabot.yml index 5145419ca..b41b7b872 100644 --- a/rhodium-standard-repositories/satellites/state.scm/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/state.scm/.github/dependabot.yml @@ -9,6 +9,7 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2 - package-ecosystem: "nix" directory: "/" schedule: diff --git a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/dependabot.yml b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/dependabot.yml index 0645eafdb..0ff1c4cfc 100644 --- a/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/dependabot.yml +++ b/rhodium-standard-repositories/satellites/well-known-ecosystem/.github/dependabot.yml @@ -9,3 +9,4 @@ updates: actions: patterns: - "*" + open-pull-requests-limit: 2