From e020ac0fd97d4d2e6f4845c10bffcd326baeab54 Mon Sep 17 00:00:00 2001
From: Jake Uribe <jake.uribe@gmail.com>
Date: Fri, 9 Oct 2026 14:45:22 -0500
Subject: [PATCH] ci(security): call out pip on main

suppress security warning generated by pip
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ebb62310..a4f13d2b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -23,3 +23,10 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+
+    # Explicitly define pip to control its branching behavior
+  - package-ecosystem: "pip"
+    directory: "/"
+    target-branch: "main"   # Forces Dependabot to only evaluate and target 'main'
+    schedule:
+      interval: "monthly"