diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 74cb186..91f6293 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,13 +4,12 @@ updates:
     directory: /
     schedule:
       interval: weekly
-    open-pull-requests-limit: 10
-    groups:
-      rust-minor:
-        update-types: [minor, patch]
+    # Alerts-only estate policy: keep Dependabot security alerts, but never
+    # open version-update pull requests.
+    open-pull-requests-limit: 0
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 0