From 2f2452ad2b425429f83695295927a68001712a48 Mon Sep 17 00:00:00 2001
From: david morales <118213696+davidmoralesz@users.noreply.github.com>
Date: Fri, 9 Oct 2026 14:14:53 -0600
Subject: [PATCH] chore(deps): update github actions monthly and cap open pull
 requests

Every Dependabot run and rebase is a billed Actions minute on a private repo.
Security updates ignore the schedule, so nothing urgent waits.
---
 .github/dependabot.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 20654dc..19c94ff 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,8 +3,11 @@ updates:
   # >>> template:base
   - package-ecosystem: github-actions
     directory: /
+    # Monthly: every update run, and every rebase of an open PR, is a billed Actions run
+    # on a private repository. Security updates ignore the schedule.
     schedule:
-      interval: weekly
+      interval: monthly
+    open-pull-requests-limit: 3
     cooldown:
       default-days: 7
     commit-message: