only do security updates for NPM (#1674)

drammock · web-flow · commit 115343c171b5 · 2024-01-22T10:13:27.000-06:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -16,3 +16,4 @@ updates:
     labels:
       - "tag: dependencies"
       - "tag: javascript"
+    open-pull-requests-limit: 0 # security updates only
