use lockfile-only strategy

Author: yyx990803

.github/dependabot.yml

@@ -1,14 +1,16 @@
 version: 2
 updates:
   # Enable version updates for npm
-  - package-ecosystem: "npm"
+  - package-ecosystem: 'npm'
     # Look for `package.json` and `lock` files in the `root` directory
-    directory: "/"
+    directory: '/'
     # Check the npm registry for updates every day (weekdays)
     schedule:
-      interval: "daily"
+      interval: 'daily'
+    open-pull-requests-limit: 10
+    versioning-strategy: lockfile-only
     allow:
-      - dependency-name: "vue"
-      - dependency-name: "vitepress"
-      - dependency-name: "@vue/theme"
-      - dependency-name: "@vue/repl"
+      - dependency-name: 'vue'
+      - dependency-name: 'vitepress'
+      - dependency-name: '@vue/theme'
+      - dependency-name: '@vue/repl'