All the tests already seem to run on sqlite, so there (in my mind) is no reason to not provide support for it.
The only change needed was to lower the delete chunk size.
Bumps [pusher/pusher-php-server](https://github.com/pusher/pusher-http-php) from 3.3.1 to 3.4.1.
<details>
<summary>Release notes</summary>
*Sourced from [pusher/pusher-php-server's releases](https://github.com/pusher/pusher-http-php/releases).*
> ## v3.4.1
> [ADDED] Support for PHP 7.3.
>
> ## v3.4.0
> [ADDED] `get_users_info` method.
</details>
<details>
<summary>Changelog</summary>
*Sourced from [pusher/pusher-php-server's changelog](https://github.com/pusher/pusher-http-php/blob/master/CHANGELOG.md).*
> ## 3.4.1 (2019-03-18)
>
> [ADDED] Support for PHP 7.3.
>
> ## 3.4.0 (2019-03-11)
>
> [ADDED] `get_users_info` method.
</details>
<details>
<summary>Commits</summary>
- [`a5fcdc6`](a5fcdc65ef) Merge pull request [#214](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/214) from pusher/v341-release
- [`4e6d35f`](4e6d35f7ee) v3.4.1 release
- [`f965ee5`](f965ee5d08) Merge pull request [#212](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/212) from GrahamCampbell/patch-1
- [`a30d364`](a30d364f6c) Fix composer.json
- [`9093be6`](9093be6934) Merge pull request [#210](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/210) from pusher/v340-release
- [`78642a8`](78642a8802) v3.4.0 release
- [`55e33e6`](55e33e6b62) Merge pull request [#209](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/209) from pusher/add-get-users-info-method
- [`9646aa4`](9646aa414e) Merge pull request [#208](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/208) from pusher/test-against-php73
- [`26bc343`](26bc3439c7) Add get_users_info method
- [`c124ff3`](c124ff359f) Test against PHP 7.3
- Additional commits viewable in [compare view](https://github.com/pusher/pusher-http-php/compare/v3.3.1...v3.4.1)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=pusher/pusher-php-server&package-manager=composer&previous-version=3.3.1&new-version=3.4.1)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [aws/aws-sdk-php-laravel](https://github.com/aws/aws-sdk-php-laravel) from 3.3.1 to 3.3.2.
<details>
<summary>Release notes</summary>
*Sourced from [aws/aws-sdk-php-laravel's releases](https://github.com/aws/aws-sdk-php-laravel/releases).*
> ## Version 3.3.2
> * Align with suggested Laravel configuration practices
> * Travis CI updated with PHP 7.3 and dependency resolution fixes
</details>
<details>
<summary>Changelog</summary>
*Sourced from [aws/aws-sdk-php-laravel's changelog](https://github.com/aws/aws-sdk-php-laravel/blob/master/CHANGELOG.md).*
> ## 3.3.2 - 2019-03-15
>
> * Align with suggested Laravel configuration practices
> * Travis CI updated with PHP 7.3 and dependency resolution fixes
</details>
<details>
<summary>Commits</summary>
- [`3e8e880`](3e8e8801d6) 3.3.2 release
- [`03124f8`](03124f83f6) Composer & Travis updates ([#155](https://github-redirect.dependabot.com/aws/aws-sdk-php-laravel/issues/155))
- [`0594ccf`](0594ccf58d) Align with suggested laravel config practices ([#145](https://github-redirect.dependabot.com/aws/aws-sdk-php-laravel/issues/145))
- See full diff in [compare view](https://github.com/aws/aws-sdk-php-laravel/compare/3.3.1...3.3.2)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=aws/aws-sdk-php-laravel&package-manager=composer&previous-version=3.3.1&new-version=3.3.2)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [symfony/dom-crawler](https://github.com/symfony/dom-crawler) from 3.4.22 to 3.4.23.
<details>
<summary>Commits</summary>
- [`d40023c`](d40023c057) Apply php-cs-fixer rule for array_key_exists()
- [`2c5d2df`](2c5d2df578) be keen to newcomers
- See full diff in [compare view](https://github.com/symfony/dom-crawler/compare/v3.4.22...v3.4.23)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=symfony/dom-crawler&package-manager=composer&previous-version=3.4.22&new-version=3.4.23)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [mpociot/laravel-apidoc-generator](https://github.com/mpociot/laravel-apidoc-generator) from 3.4.1 to 3.4.2.
<details>
<summary>Release notes</summary>
*Sourced from [mpociot/laravel-apidoc-generator's releases](https://github.com/mpociot/laravel-apidoc-generator/releases).*
> ## 3.4.2
> [Changelog](https://github.com/mpociot/laravel-apidoc-generator/blob/master/CHANGELOG.md#342---sunday-10-march-2019)
</details>
<details>
<summary>Changelog</summary>
*Sourced from [mpociot/laravel-apidoc-generator's changelog](https://github.com/mpociot/laravel-apidoc-generator/blob/master/CHANGELOG.md).*
> ## [3.4.2] - Sunday, 10 March 2019
> ### Added
> - Ability to set cookies on response calls (https://github-redirect.dependabot.com/mpociot/laravel-apidoc-generator/pull/471)
</details>
<details>
<summary>Commits</summary>
- [`61dc0fb`](61dc0fbe62) Update CHANGELOG.md
- [`f67e418`](f67e41847e) Merge pull request [#471](https://github-redirect.dependabot.com/mpociot/laravel-apidoc-generator/issues/471) from zasan1017/feat/issue-468
- [`850e4cf`](850e4cf8d1) feat: cookies added to response_call.
- See full diff in [compare view](https://github.com/mpociot/laravel-apidoc-generator/compare/3.4.1...3.4.2)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=mpociot/laravel-apidoc-generator&package-manager=composer&previous-version=3.4.1&new-version=3.4.2)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [mpociot/laravel-apidoc-generator](https://github.com/mpociot/laravel-apidoc-generator) from 3.4.0 to 3.4.1.
<details>
<summary>Release notes</summary>
*Sourced from [mpociot/laravel-apidoc-generator's releases](https://github.com/mpociot/laravel-apidoc-generator/releases).*
> ## 3.4.1
> [CHANGELOG](https://github.com/mpociot/laravel-apidoc-generator/blob/master/CHANGELOG.md#341---monday-4-march-2019)
</details>
<details>
<summary>Changelog</summary>
*Sourced from [mpociot/laravel-apidoc-generator's changelog](https://github.com/mpociot/laravel-apidoc-generator/blob/master/CHANGELOG.md).*
> ## [3.4.1] - Monday, 4 March 2019
> ### Fixed
> - Support for Lumen 5.7 (https://github-redirect.dependabot.com/mpociot/laravel-apidoc-generator/pull/467)
</details>
<details>
<summary>Commits</summary>
- [`46e7a34`](46e7a34b63) Update CHANGELOG.md
- [`6b31623`](6b316236af) Merge pull request [#467](https://github-redirect.dependabot.com/mpociot/laravel-apidoc-generator/issues/467) from ItsiAdam/master
- [`2b91065`](2b91065588) Fix Lumen compatibility
- See full diff in [compare view](https://github.com/mpociot/laravel-apidoc-generator/compare/3.4.0...3.4.1)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=mpociot/laravel-apidoc-generator&package-manager=composer&previous-version=3.4.0&new-version=3.4.1)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 7.5.1 to 7.5.2.
<details>
<summary>Changelog</summary>
*Sourced from [phpunit/phpunit's changelog](https://github.com/sebastianbergmann/phpunit/blob/master/ChangeLog-7.5.md).*
> ## [7.5.2] - 2019-01-15
>
> ### Fixed
>
> * Fixed [#3456](https://github-redirect.dependabot.com/sebastianbergmann/phpunit/pull/3456): Generator for Xdebug filter script does not handle directories with leading `.` correctly
> * Fixed [#3459](https://github-redirect.dependabot.com/sebastianbergmann/phpunit/issues/3459): `[**requires**](https://github.com/requires)` function swallows digits at the end of function name
</details>
<details>
<summary>Commits</summary>
- [`7c89093`](7c89093bd0) Prepare release
- [`6bef716`](6bef716234) Merge branch '6.5' into 7.5
- [`6050504`](6050504ca5) Bump copyright year
- [`99bd534`](99bd534a8a) Fix CS/WS issue
- [`56e1bce`](56e1bcea42) Update ChangeLog
- [`afa7f01`](afa7f01095) feat(xdebug-filter-generator): improve directories paths
- [`be5f758`](be5f75805b) Merge branch '6.5' into 7.5
- [`a33f8d2`](a33f8d243c) Update php-cs-fixer
- [`eb22621`](eb22621779) Revert "Do not use Phive to manage php-cs-fixer (for now)"
- [`d44f244`](d44f2448e6) Merge branch '6.5' into 7.5
- Additional commits viewable in [compare view](https://github.com/sebastianbergmann/phpunit/compare/7.5.1...7.5.2)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=phpunit/phpunit&package-manager=composer&previous-version=7.5.1&new-version=7.5.2)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
Bumps [pusher/pusher-php-server](https://github.com/pusher/pusher-http-php) from 3.2.0 to 3.3.0.
<details>
<summary>Release notes</summary>
*Sourced from [pusher/pusher-php-server's releases](https://github.com/pusher/pusher-http-php/releases).*
> ## v3.3.0
> - **[ADDED]** Support for End-to-end encrypted channels for `triggerbatch`
> - **[FIXED]** `trigger` behavior with mixtures of encrypted and non-encrypted channels
</details>
<details>
<summary>Changelog</summary>
*Sourced from [pusher/pusher-php-server's changelog](https://github.com/pusher/pusher-http-php/blob/master/CHANGELOG.md).*
> ## 3.3.0 (2019-01-03)
>
> [ADDED] Support for End-to-end encrypted channels for triggerbatch
> [FIXED] trigger behavior with mixtures of encrypted and non-encrypted channels
</details>
<details>
<summary>Commits</summary>
- [`5eb4ea2`](5eb4ea29db) v.3.3.0
- [`c3778c5`](c3778c554a) Add End-to-end encryption support for triggerbatch + tests
- [`910cf41`](910cf416c6) Fix trigger behaviour with mixed encrypted and non-encrypted channels + tests
- [`8fd6def`](8fd6def819) Merge pull request [#194](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/194) from samnela/remove-deprecated-testcase
- [`b92528f`](b92528fe92) Remove deprecated testcase implementation
- [`82a870c`](82a870cf3e) Merge pull request [#196](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/196) from pusher/remove-ddn
- [`0a104e6`](0a104e6735) Merge pull request [#195](https://github-redirect.dependabot.com/pusher/pusher-http-php/issues/195) from pusher/handle-client-error
- [`fa573b2`](fa573b2275) Rename ddn_domain to channels_domain
- [`bf9bebc`](bf9bebcd2a) Make different request failures cases explicit
- [`ad5ef1e`](ad5ef1ee06) Or API error log body instead of empty error
- Additional commits viewable in [compare view](https://github.com/pusher/pusher-http-php/compare/v3.2.0...v3.3.0)
</details>
<br />
[](https://dependabot.com/compatibility-score.html?dependency-name=pusher/pusher-php-server&package-manager=composer&previous-version=3.2.0&new-version=3.3.0)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
</details>
