f7cd4fe6fc
- Add ignore rule in dependabot.yml for @types/node semver-major updates - Pin @types/node from ^25 to ^24 (matches node-version in CI workflow) - Sanctioned exception to the no-blanket-ignore rule: @types/node must track the runtime Node major, and Dependabot cannot detect the runtime - Confirmed tsc and cdk synth pass with the pinned version Closes #3
23 lines
780 B
YAML
23 lines
780 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: npm
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
assignees:
|
|
- amoussa1229
|
|
ignore:
|
|
# @types/node must track the runtime Node major, not the latest release.
|
|
# Pure-CDK repo: the runtime is the Node that runs `cdk synth`/`tsc` in CI.
|
|
# Dependabot can't see that and a too-new types major still compiles (passes
|
|
# CI, wrong at runtime). Sanctioned exception to the no-blanket-ignore rule
|
|
# (engineering-handbook github-standards Pinning Principle). Minor/patch flow.
|
|
- dependency-name: "@types/node"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
assignees:
|
|
- amoussa1229
|