mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-09-30 10:23:16 +00:00
749e5ce4e9
This pure CDK app is built and synthed on Node 24 (no Lambdas), so @types/node is pinned to ^24. A too-new types major still compiles, so a major bump passes CI while describing APIs absent at the build Node. Add a scoped Dependabot ignore for @types/node semver-major bumps so the alignment can only be broken deliberately, alongside a Node upgrade. Minor/patch within the major still flow. Sanctioned exception to the no-blanket-ignore rule (engineering-handbook github-standards Pinning Principle).
25 lines
974 B
YAML
25 lines
974 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
ignore:
|
|
# @types/node must track the runtime Node major, not the latest release.
|
|
# This is a pure CDK app (no Lambdas); it is built/synthed on Node 24, so
|
|
# @types/node is pinned to ^24. Dependabot can't see the build Node and a
|
|
# too-new types major still compiles, so a major bump passes CI while being
|
|
# wrong. This is the sanctioned exception to the no-blanket-ignore rule
|
|
# (engineering-handbook github-standards Pinning Principle). Bump deliberately
|
|
# alongside a Node upgrade. Minor/patch within the current major still flow.
|
|
- dependency-name: "@types/node"
|
|
update-types: ["version-update:semver-major"]
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|