github: Dependabot alerts will pause on inactive repositories
Starting December 8, 2026, GitHub will pause Dependabot alerts on most repositories that have had no activity for the past year. Existing alerts will be archived rather than deleted, and alerts can be re-enabled if the repository becomes active.