From e486923ad070c1f48d7acf200616e0d1898440d7 Mon Sep 17 00:00:00 2001
From: Steffen Neubauer <stefreak@googlemail.com>
Date: Mon, 6 Mar 2023 11:55:23 +0100
Subject: [PATCH] ci(dependabot): comment out npm ecosystem

We do not use dependabot with npm yet because our build process is currently incompatible with "pure ESM build" dependencies.

See also  https://github.com/garden-io/garden/issues/3841
---
 .github/dependabot.yml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 69dfa8ca82..4fba6fc767 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,18 +8,19 @@ updates:
   # Automatically update GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
     schedule:
       interval: "weekly"
   # Automatically update Dockerfile FROM images
   - package-ecosystem: "docker"
     directory: "/"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 5
     schedule:
       interval: "daily"
+  # TODO: Consider enabling the NPM package ecosystem once we have fixed our build process to support pure ESM build dependencies, see also https://github.com/garden-io/garden/issues/3841
   # Automatically update NPM packages
-  - package-ecosystem: "npm"
-    directory: "/"
-    open-pull-requests-limit: 3 # for now, once 0.13 landed we can increase this
-    schedule:
-      interval: "daily"
+  # - package-ecosystem: "npm"
+  #   directory: "/"
+  #   open-pull-requests-limit: 5
+  #   schedule:
+  #     interval: "daily"