diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 4c01440..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,56 +0,0 @@
-version: 2
-
-updates:
-  # Go server, CI action and shared internal packages
-  - package-ecosystem: gomod
-    directory: /
-    schedule:
-      interval: weekly
-      day: monday
-    open-pull-requests-limit: 5
-    commit-message:
-      prefix: "chore(deps)"
-    groups:
-      # Patch and minor bumps are routine; review them as one PR rather than
-      # one per module. Majors stay separate so they get read properly.
-      go-minor-patch:
-        update-types:
-          - minor
-          - patch
-
-  # React UI
-  - package-ecosystem: npm
-    directory: /web
-    schedule:
-      interval: weekly
-      day: monday
-    open-pull-requests-limit: 5
-    commit-message:
-      prefix: "chore(deps)"
-    groups:
-      npm-minor-patch:
-        update-types:
-          - minor
-          - patch
-
-  # Workflow actions. These run with repository credentials, so an unmaintained
-  # or yanked action matters more here than a normal dependency.
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: weekly
-      day: monday
-    commit-message:
-      prefix: "chore(ci)"
-
-  # Base images for the server, CI action, UI and dev containers. Dependabot
-  # only tracks the tags written in the Dockerfiles, so keep those pinned to a
-  # specific minor (alpine:3.21, node:22-alpine) rather than latest.
-  - package-ecosystem: docker
-    directories:
-      - /deployments
-    schedule:
-      interval: weekly
-      day: monday
-    commit-message:
-      prefix: "chore(docker)"