From 759adcf876d1d6b77fa07aff1150dab581d23f80 Mon Sep 17 00:00:00 2001
From: tiennm99 <tiennm99@outlook.com>
Date: Sat, 25 Jul 2026 12:14:11 +0700
Subject: [PATCH] chore: remove dependabot version-update config

Drops .github/dependabot.yml, which existed solely to opt into routine
version updates. Dependabot alerts and security updates are repo-level
settings and both stay enabled, so vulnerabilities are still reported and
still get automated fix PRs.

What stops: weekly npm bumps and monthly GitHub Actions bumps. Non-vulnerable
dependencies now drift until a security advisory forces the issue.

Original config recoverable from 30670c8.
---
 web/.github/dependabot.yml | 19 -------------------
 1 file changed, 19 deletions(-)
 delete mode 100644 web/.github/dependabot.yml

diff --git a/web/.github/dependabot.yml b/web/.github/dependabot.yml
deleted file mode 100644
index 10cf9ba..0000000
--- a/web/.github/dependabot.yml
+++ /dev/null
@@ -1,19 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
-    groups:
-      minor-and-patch:
-        update-types: ["minor", "patch"]
-      security:
-        applies-to: security-updates
-        patterns: ["*"]
-    versioning-strategy: increase
-    labels: ["dependencies", "security"]
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "monthly"