chore: kill dependabot

[colinnielsen]

Background

Checklist

• Documentation updated
• Tested code changes

ticket

[linear]

MP-324 chore: Kill dependabot

[its-everdred]

I actually like that we have an automated background job that finds and open PRs for the sake of addressing new security vulnerabilities. Otherwise it's on us to be very in tune with dependencies of dependencies that we've never heard of.

If we think it's too noisy, we can adjust the number of open PRs, frequency, interval, update-types etc. I'd rather make the safety net less frequent than non-existent

[colinnielsen]

I actually like that we have an automated background job that finds and open PRs for the sake of addressing new security vulnerabilities. Otherwise it's on us to be very in tune with dependencies of dependencies that we've never heard of.

If we think it's too noisy, we can adjust the number of open PRs, frequency, interval, update-types etc. I'd rather make the safety net less frequent than non-existent

That's a fair call - I followed these instructions to only allow dependabot to push security-related prs