mirror of
https://github.com/harvard-edge/cs249r_book.git
synced 2026-07-19 09:24:14 -05:00
Removed .github/dependabot.yml. The weekly Monday PRs across 15 ecosystems (8 npm, 5 pip, 1 github-actions, 1 newsletter) churned the inbox without proportionate review capacity, and merged bumps periodically broke dev (most recently nbdev 3.0.16's settings.ini hard error). Read-only Dependabot vulnerability alerts remain enabled; this change disables the auto-PR machinery only. Dep updates revert to a deliberate manual cadence — see pinned upper bounds in each subproject's requirements.