From e4f8197853ca568bbb9fe1af1ab48a033a80d63f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=81ukasz=20Holeczek?= Date: Tue, 4 Aug 2026 11:49:34 +0200 Subject: [PATCH] chore(dependabot): automate only minors and patches Majors are coordinated upgrades taken by hand: one unusable major (typescript 7, blocked by typescript-eslint's peer range) otherwise holds a whole group PR hostage. 0.x packages get an explicit minor guard, since for them a minor is a breaking release. --- .github/dependabot.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 35ac637..124f658 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -32,14 +32,18 @@ updates: versioning-strategy: increase rebase-strategy: disabled ignore: + # only minors and patches are automated; majors are coordinated upgrades taken + # by hand — a single unusable one (typescript 7, blocked by typescript-eslint's + # peer range) otherwise holds the whole group PR hostage + - dependency-name: '*' + update-types: + - 'version-update:semver-major' # linter churn — new rules break CI; bump deliberately - dependency-name: 'eslint*' update-types: - - 'version-update:semver-major' - 'version-update:semver-minor' - dependency-name: 'typescript-eslint' update-types: - - 'version-update:semver-major' - 'version-update:semver-minor' groups: production-dependencies: