From f27386d9ceeb80f0d87828344944b32ad780b439 Mon Sep 17 00:00:00 2001
From: Wu Sheng <wu.sheng@foxmail.com>
Date: Tue, 3 Nov 2026 14:10:17 +0800
Subject: [PATCH] chore: disable Dependabot automatic security update PRs

Set github.dependabot_updates to false in .asf.yaml so Dependabot no
longer opens automatic security update pull requests. Security alerts
are fixed through regular dependency-bump PRs instead.

Dependabot alerts are not changed and stay enabled.

Generated-by: Kiro Crew (claude-opus-5.5)
---
 .asf.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.asf.yaml b/.asf.yaml
index 9f09a9f..8be6244 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -16,6 +16,7 @@
 #
 
 github:
+    dependabot_updates: false
     description: The Nginx Lua agent for Apache SkyWalking
     homepage: https://skywalking.apache.org/
     labels: