seahaven-door-unlock-api/.github/dependabot.yml
seahaven-openswe[bot] 58f2b627e2
Some checks are pending
Deploy / deploy (push) Waiting to run
chore: upgrade Lambda runtime nodejs22.x to nodejs24.x (#45)
2026-07-04 01:25:45 -04:00

21 lines
865 B
YAML

version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"
ignore:
# @types/node must track the runtime Node major, not the latest release.
# This stack's Lambdas run on nodejs24.x, so @types/node is pinned to ^24.
# Dependabot can't see the Lambda runtime and a too-new types major still
# compiles, so a major bump passes CI while being wrong at runtime. This is
# the sanctioned exception to the no-blanket-ignore rule (engineering-handbook
# github-standards Pinning Principle). Bump deliberately alongside a runtime
# upgrade. Minor/patch within the current major still flow.
- dependency-name: "@types/node"
update-types: ["version-update:semver-major"]