Conflicting info regarding open PR limit for Dependabot security updates

[FaithOmbongi]

Code of Conduct

• I have read and agree to the GitHub Docs project's Code of Conduct

What article on docs.github.com is affected?

Dependabot TSG: Pull request limit reached error vs. dependabot.yml options reference: open-pull-requests-limit key

What part(s) of the article would you like to see updated?

The dependabot.yml reference has this note: "Security update pull requests are not subject to this limit and do not count toward it. There is no limit on the number of open pull requests for security updates."

The context of this note is within the open-pull-requests-limit section and as I've understood it, the first sentence is true. However, the second sentence seems to conflict with the TSG which calls out a hard limit of 10 open security update PRs.

My confusion - does this maximum for open security update PRs exist?

• If yes, then the second sentence in the note should either be removed or tweaked to something like "The hard limit of 10 open PRs for security updates is not configurable using open-pull-requests-limit ."
• If no and it doesn't exist, then probably the TSG reference should be fixed?

Additional information

No response

[welcome]

Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

[subatoi]

@FaithOmbongi thanks for raising this—you're correct that there's an apparent discrepancy and I'll mark it for the appropriate team to investigate, and follow up as soon as possible.