diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 254e5b022..abfd0dafc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,11 +16,14 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    # 0 disables version-update PRs; the entry still labels security updates
+    open-pull-requests-limit: 0
     labels:
       - "infrastructure"
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "monthly"
+    open-pull-requests-limit: 0
     labels:
       - "infrastructure"