chore: Update dependabot.yml template (#1813)

* chore: Update `dependabot.yml` template not to touch pip dependencies
googleapis · Jun 16, 2023 · f961eb0 · f961eb0
1 parent 38ad636
commit f961eb0
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/synthtool/gcp/templates/java_library/.github/dependabot.yml b/synthtool/gcp/templates/java_library/.github/dependabot.yml
@@ -5,10 +5,13 @@ updates:
     schedule:
       interval: "daily"
     # Disable version updates for Maven dependencies
-    open-pull-requests-limit: 0
+    # we use renovate-bot as well as shared-dependencies BOM to update maven dependencies.
+    ignore: "*"
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "daily"
     # Disable version updates for pip dependencies
-    open-pull-requests-limit: 0
+    # If a security vulnerability comes in, we will be notified about 
+    # it via template in the synthtool repository.
+    ignore: "*"