diff --git a/.github/audit-exceptions.yml b/.github/audit-exceptions.yml
index 82cdefe44c..61baa6e380 100644
--- a/.github/audit-exceptions.yml
+++ b/.github/audit-exceptions.yml
@@ -5,14 +5,14 @@ exceptions:
     severity: high
     reason: "Admin export only; switched to dynamic import to reduce exposure (CVE-2023-30533)"
     mitigation: "Load only on export; restrict export permissions and data scope"
-    expires_on: "2026-04-05"
+    expires_on: "2026-07-07"
     owner: "security@your-domain"
   - package: xlsx
     advisory: "GHSA-5pgg-2g8v-p4x9"
     severity: high
     reason: "Admin export only; switched to dynamic import to reduce exposure (CVE-2024-22363)"
     mitigation: "Load only on export; restrict export permissions and data scope"
-    expires_on: "2026-04-05"
+    expires_on: "2026-07-07"
     owner: "security@your-domain"
   - package: lodash
     advisory: "GHSA-r5fr-rjxr-66jc"
diff --git a/backend/internal/service/payment_config_service_test.go b/backend/internal/service/payment_config_service_test.go
index ffc5f24250..140a0f8d64 100644
--- a/backend/internal/service/payment_config_service_test.go
+++ b/backend/internal/service/payment_config_service_test.go
@@ -72,11 +72,11 @@ func TestParsePaymentConfig(t *testing.T) {
 		if cfg.Enabled {
 			t.Fatal("expected Enabled=false by default")
 		}
-		if cfg.MinAmount != 1 {
-			t.Fatalf("expected MinAmount=1, got %v", cfg.MinAmount)
+		if cfg.MinAmount != 0 {
+			t.Fatalf("expected MinAmount=0 (no limit), got %v", cfg.MinAmount)
 		}
-		if cfg.MaxAmount != 99999999.99 {
-			t.Fatalf("expected MaxAmount=99999999.99, got %v", cfg.MaxAmount)
+		if cfg.MaxAmount != 0 {
+			t.Fatalf("expected MaxAmount=0 (no limit), got %v", cfg.MaxAmount)
 		}
 		if cfg.OrderTimeoutMin != 30 {
 			t.Fatalf("expected OrderTimeoutMin=30, got %v", cfg.OrderTimeoutMin)