From 031c422911c99fabfc829812c7173491aeae6e96 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Han=C3=9F?= Date: Fri, 14 Aug 2026 13:00:27 +0000 Subject: [PATCH] chore(deps): ignore major PRs for app runtime libs (lingui, openid-client, tsmonads, rambda, serialize-error, uuid) --- .github/dependabot.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4c33e8f..c5565cb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -85,6 +85,23 @@ updates: # and math rendering is core). Patch bumps (0.16.x) still flow. - dependency-name: "katex" update-types: ["version-update:semver-minor", "version-update:semver-major"] + # App runtime libs: suppress MAJOR PRs. Each is a deliberate migration, + # not an auto-merge (@lingui 4->6 is a coordinated cross-package move with + # a deprecated macro; openid-client 5->6 is an auth-API rewrite; tsmonads, + # rambda, serialize-error carry breaking API/ESM changes; uuid advisory is + # non-applicable and peer-blocked). Minor/patch still flow via the group. + - dependency-name: "@lingui/*" + update-types: ["version-update:semver-major"] + - dependency-name: "openid-client" + update-types: ["version-update:semver-major"] + - dependency-name: "tsmonads" + update-types: ["version-update:semver-major"] + - dependency-name: "rambda" + update-types: ["version-update:semver-major"] + - dependency-name: "serialize-error" + update-types: ["version-update:semver-major"] + - dependency-name: "uuid" + update-types: ["version-update:semver-major"] # Keep GitHub Actions used by the CI workflow up to date - package-ecosystem: "github-actions"