From 81c717b2f0e448ef365597d2061ef2a4e035ec3b Mon Sep 17 00:00:00 2001 From: Dusten Hubbard Date: Tue, 1 Sep 2026 22:04:27 -0500 Subject: [PATCH] ci(dependabot): ignore major versions of numpy, opencv and zarr Major versions of these four packages break the current stack. numpy 2.x fails at import under opencv-python 4.8, and zarr 3 and opencv 5 change their APIs. Left unignored, each one holds a slot in open-pull-requests-limit indefinitely, and on 2026-09-01 the five open major bumps filled every slot, which suppressed the numpy update that was needed. These four are raised by editing the pin, not by Dependabot. --- .github/dependabot.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index dc156ce8..173a3bc8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,6 +15,20 @@ updates: groups: routine: update-types: ["patch", "minor"] + # Major versions of these four break the current stack (numpy 2.x fails at + # import under opencv-python 4.8; zarr 3 and opencv 5 change their APIs). Left + # unignored they each hold a slot in open-pull-requests-limit indefinitely, + # which on 2026-09-01 blocked the numpy update that was actually needed. They + # are taken deliberately, by editing the pin, not by Dependabot. + ignore: + - dependency-name: "numpy" + update-types: ["version-update:semver-major"] + - dependency-name: "opencv-python" + update-types: ["version-update:semver-major"] + - dependency-name: "opencv-python-headless" + update-types: ["version-update:semver-major"] + - dependency-name: "zarr" + update-types: ["version-update:semver-major"] commit-message: prefix: "chore(deps)"