From 1edb7d7b6b44967982471ac76552645187dc3ec9 Mon Sep 17 00:00:00 2001
From: Adrienne Stilp <amstilp@uw.edu>
Date: Wed, 28 Feb 2024 10:50:56 -0800
Subject: [PATCH] Use only direct dependencies

As before, dependabot was timing out.
---
 .github/dependabot.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 055a0096..de3f7d09 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -17,7 +17,7 @@ updates:
       interval: "weekly"
       day: "sunday"
     allow:
-      # Allow both direct and indirect updates for all packages
-      - dependency-type: "all"
+      # Allow only direct dependencies - should be ok with pip-sync?
+      - dependency-type: "direct"
     # Allow up to 20 dependencies for pip dependencies
     open-pull-requests-limit: 20