diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f5a85a9..0265e9c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,3 +6,4 @@ updates:
       interval: "weekly"
     reviewers:
       - "az-digital/developers"
+    open-pull-requests-limit: 10
diff --git a/upstream/composer.json b/upstream/composer.json
index ac571ec..8402cc7 100644
--- a/upstream/composer.json
+++ b/upstream/composer.json
@@ -20,7 +20,7 @@
         "drupal/config_import_single": "2.0.0",
         "drupal/core-composer-scaffold": "~10.3.0",
         "drupal/core-recommended": "~10.3.0",
-        "drupal/pantheon_advanced_page_cache": "2.2.0",
+        "drupal/pantheon_advanced_page_cache": "2.3.0",
         "drupal/redis": "1.7",
         "drush/drush": "^12.4.3",
         "oomphinc/composer-installers-extender": "^2.0.0",
diff --git a/web/sites/default/settings.upstream.php b/web/sites/default/settings.upstream.php
index d14eae8..9acc8d7 100644
--- a/web/sites/default/settings.upstream.php
+++ b/web/sites/default/settings.upstream.php
@@ -92,8 +92,9 @@
 
   /**
    * Enable config_readonly (if installed) on test and live environments.
+   * Disable config_readonly (if installed) if config is being changed via CLI.
    */
-  if (in_array($_ENV['PANTHEON_ENVIRONMENT'], ['test', 'live'])) {
+  if (in_array($_ENV['PANTHEON_ENVIRONMENT'], ['test', 'live']) && PHP_SAPI !== 'cli') {
     $settings['config_readonly'] = TRUE;
   }