cc @zowoq

same as in NixOS/nix#3757

Unfortunately, it seems that this runs on forks as well. It appears that if the master branch of your fork contains this commit, your fork starts getting dependabot PRs, and I can't find a way to turn it off.

The documentation claims that it has to be manually enabled: https://docs.github.com/en/github/administering-a-repository/enabling-and-disabling-version-updates#enabling-version-updates-on-forks

I'm certain I never manually enabled it, but it seems to be enabled anyway and there doesn't seem to be any way to disable it.

@Mic92 We may want to disable this until we can restrict it to this repo so it isn't spamming forks.

cc @Ma27

Upstream has an open issue about this: dependabot/dependabot-core#2198 (comment)

Dependabot is disabled by default for forks ... but sometimes it starts sending PRs anyway.

NixOS/nixpkgs-channels#23

It's even opened a PR in the channel mirror.

#95055