The security_updates and bundle_updates settings are currently only configurable via .deppbot.yml, even though several other settings (base_branch, frequency, etc.) are available through the UI. Please add security_updates and bundle_updates as UI-configurable options. Extra dotfiles add noise to projects' code bases.