From a8634bd6c75384f2f4c490f75f7ee9a106c5ef14 Mon Sep 17 00:00:00 2001
From: Wu Sheng <wu.sheng@foxmail.com>
Date: Tue, 3 Nov 2026 14:10:17 +0800
Subject: [PATCH] chore: disable Dependabot automatic security update PRs

Set github.dependabot_updates to false in .asf.yaml so Dependabot no
longer opens automatic security update pull requests. Security alerts
are fixed through regular dependency-bump PRs instead.

Dependabot alerts are not changed and stay enabled.

Generated-by: Kiro Crew (claude-opus-5.5)
---
 .asf.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.asf.yaml b/.asf.yaml
index 817a1e4c5..9714721f2 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -16,6 +16,7 @@
 #
 
 github:
+  dependabot_updates: false
   description: The Python agent for Apache SkyWalking
   homepage: https://skywalking.apache.org/
   labels: