diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2390d8c..c9120b8 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    # Security-only maintenance: 0 disables version updates; security updates still open PRs.
+    open-pull-requests-limit: 0
     groups:
       github-actions:
         patterns: