file-share/.github/dependabot.yml
seahaven-openswe[bot] 0f3b74e869
Some checks are pending
Deploy / deploy (push) Waiting to run
fix: stop dependabot from proposing wrong-direction @types/node major bumps (#19)
2026-07-04 01:50:03 -04:00

28 lines
915 B
YAML

version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"
ignore:
# @types/node must track the runtime Node major, not the latest release.
# Pure-CDK repo: the runtime is the Node that runs `cdk synth`/`tsc` in CI.
# Dependabot can't see that and a too-new types major still compiles (passes
# CI, wrong at runtime). Sanctioned exception to the no-blanket-ignore rule
# (engineering-handbook github-standards Pinning Principle). Minor/patch flow.
- dependency-name: "@types/node"
update-types: ["version-update:semver-major"]
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"