Bringing supply chain security features to the Go community
GitHub's dependabot is causing a ton of "spam" in our frontend (Angular) repositories, as it seemingly opens 1-5 PRs per day to bump random dependencies. I really hope this does not become common practice for our Go repositories.<p>Is there an option to tell dependabot "make one PR per week at most, please, and bundle your changes"?