diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 23829ff9..85b3a123 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,10 @@
 # Dependabot disabled - we manage dependencies manually
+# Using open-pull-requests-limit: 0 to disable version updates
+# See: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
 version: 2
-updates: []
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: yearly
+    open-pull-requests-limit: 0
diff --git a/scripts/lint.mjs b/scripts/lint.mjs
index 8d7029f7..d39459c9 100644
--- a/scripts/lint.mjs
+++ b/scripts/lint.mjs
@@ -104,6 +104,7 @@ function shouldRunAllLinters(changedFiles) {
  * Filter files to only those that should be linted.
  */
 function filterLintableFiles(files) {
+  // Only include extensions actually supported by oxfmt/oxlint
   const lintableExtensions = new Set([
     '.js',
     '.mjs',
@@ -111,11 +112,6 @@ function filterLintableFiles(files) {
     '.ts',
     '.cts',
     '.mts',
-    '.json',
-    '.jsonc',
-    '.md',
-    '.yml',
-    '.yaml',
   ])
 
   const oxlintExcludePatterns = getOxlintExcludePatterns()