only do security updates for NPM (pydata#1674)

drammock · ivanov · commit 3b55d019edcd · 2024-06-04T11:16:04.000-07:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -16,3 +16,4 @@ updates:
     labels:
       - "tag: dependencies"
       - "tag: javascript"
+    open-pull-requests-limit: 0 # security updates only
