Don't update Rhino
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 25b92a3..6c49756 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -43,4 +43,6 @@
         versions: ">= 10.0"
       - dependency-name: "org.glassfish.jaxb:*"
         versions: ">= 3.0"
+      # Don't upgrade Rhino unless somebody is willing to figure out the necessary code changes.
+      - dependency-name: "rhino:js"
     open-pull-requests-limit: 15