mirror of
https://github.com/tiennm99/loldle.git
synced 2026-10-11 03:13:42 +00:00
tiennm99
759adcf876
Drops .github/dependabot.yml, which existed solely to opt into routine version updates. Dependabot alerts and security updates are repo-level settings and both stay enabled, so vulnerabilities are still reported and still get automated fix PRs. What stops: weekly npm bumps and monthly GitHub Actions bumps. Non-vulnerable dependencies now drift until a security advisory forces the issue. Original config recoverable from 30670c8.