From 02b3f09b5b81cfb621d8e62da75afaa3930b30ae Mon Sep 17 00:00:00 2001
From: Jamison French <jamison@developmentseed.org>
Date: Thu, 2 Jul 2026 15:56:00 -0500
Subject: [PATCH] feat: add CODEOWNERS file to maintain dependabot PRs

---
 .github/CODEOWNERS     |  6 ++++++
 .github/dependabot.yml | 11 -----------
 2 files changed, 6 insertions(+), 11 deletions(-)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..cc5a49d
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,6 @@
+# GitHub Actions updates
+/.github/workflows/** @MAAP-Project/data-security
+
+# Python dependency manifests/locks
+/pyproject.toml @MAAP-Project/data-security
+/uv.lock @MAAP-Project/data-security
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 71cde48..a19faaa 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -21,14 +21,3 @@ updates:
           - "*"
     cooldown:
       default-days: 30
-
-  - package-ecosystem: npm
-    directory: /
-    schedule:
-      interval: monthly
-    groups:
-      node-dependencies:
-        patterns:
-          - "*"
-    cooldown:
-      default-days: 30