From 6380f09afe3b72865dcfe350745ad1671a038b8f Mon Sep 17 00:00:00 2001
From: Wu Sheng <wu.sheng@foxmail.com>
Date: Tue, 3 Nov 2026 14:10:17 +0800
Subject: [PATCH] chore: disable Dependabot automatic security update PRs

Set github.dependabot_updates to false in .asf.yaml so Dependabot no
longer opens automatic security update pull requests. Security alerts
are fixed through regular dependency-bump PRs instead.

Dependabot alerts are not changed and stay enabled.

Generated-by: Kiro Crew (claude-opus-5.5)
---
 .asf.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.asf.yaml b/.asf.yaml
index 2b9d00e..d741258 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -17,6 +17,7 @@
 #
 
 github:
+  dependabot_updates: false
   description: Apache SkyWalking Rust Agent
   homepage: https://skywalking.apache.org/
   labels: