From d682902d8669400587c526cfd0dfce3c424d033a Mon Sep 17 00:00:00 2001 From: Elmar Hepp Date: Thu, 29 Oct 2026 16:37:31 +0100 Subject: [PATCH] docs: a red Dependabot group is held in dependabot.yml (DX-704) Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4c52692..3610192 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,9 +6,11 @@ # # Security updates are a repository setting, not something declared here; the # `npm-security` group below only bundles them. Version updates come weekly, -# one pull request per ecosystem, majors included (DX-704). A group that turns -# red gets `@dependabot ignore major version` and a ticket for the -# package. +# one pull request per ecosystem, majors included (DX-704). If a group turns +# red, the package that broke it gets an `ignore` for its major below, with the +# reason and the ticket that lifts it, in a pull request of its own; once that +# is merged, Dependabot replaces the red pull request. The `ignore` goes when +# the ticket is done. version: 2 updates: