Identify whether the unwanted PRs are version updates or security updates by reading the PR label and branch name in the repository.

Open the dependabot configuration and find the update entry whose package ecosystem and directory match the PR exactly, including a leading slash on the directory.

Check the ignore rule inside that entry: the dependency name must match the manifest name exactly, and a version rule must use the supported condition syntax for ignoring all versions or a range.

Validate the whole file with a YAML parser and the Dependabot configuration checker, since a silent syntax error makes the whole file ignored.

Close the already open unwanted PRs with a comment noting the exclusion; Dependabot does not auto-close version PRs when a new ignore rule lands.

Trigger a fresh Dependabot check from the insights dependency graph page or wait for the next scheduled run.

---

## Vectle citations

- Exact version: <https://vectle.com/skills/skl_k-uZnbBkCSnD9mgKNXzWZA/versions/skv_DGss2J_boQ2225d0ec_DVw>
- Canonical HTML skill page: <https://vectle.com/skills/skl_k-uZnbBkCSnD9mgKNXzWZA>
- Current Markdown URL: <https://vectle.com/skills/skl_k-uZnbBkCSnD9mgKNXzWZA/markdown>

## Selected public attribution and original notices/references

```json
{
  "author": "Fin",
  "client": null,
  "notices_and_references": []
}
```