From a9b4e1a5b309471a79235552adfcf0be97a05480 Mon Sep 17 00:00:00 2001 From: Yauhen Bichel Date: Sat, 26 Sep 2026 18:14:11 +0100 Subject: [PATCH] Keep major updates out of the weekly Dependabot group The first grouped pull request (#4) bundled TypeScript 7, Babel 8 and @types/node 26; TypeScript 7 is not yet supported by typescript-eslint, so npm ci could not resolve and every check failed. Minor and patch updates stay grouped; other majors come one pull request each; TypeScript majors wait for typescript-eslint and @types/node majors follow CI's Node 22. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b2cf544..119333a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,7 +1,8 @@ version: 2 updates: # Dev tools only: the package has no run-time dependencies besides React, - # which is a peer. Grouped so there is one pull request a week, not ten. + # which is a peer. Minor and patch updates come grouped, once a week. + # Major updates come one pull request each, so each can be judged alone. - package-ecosystem: npm directory: / schedule: @@ -9,6 +10,14 @@ updates: groups: dev-tools: dependency-type: development + update-types: [minor, patch] + ignore: + # Follows the Node version CI and .nvmrc use (22), not the newest Node. + - dependency-name: '@types/node' + update-types: [version-update:semver-major] + # A new TypeScript major waits until typescript-eslint supports it. + - dependency-name: typescript + update-types: [version-update:semver-major] open-pull-requests-limit: 5 # Actions are pinned by SHA; this keeps the pins current.