Ignore the two Dependabot bumps that cannot land

[rheos]

Closes #76.

Adds two ignore entries to the npm ecosystem in .github/dependabot.yml:

• better-sqlite3 >=13. chore(deps): bump better-sqlite3 from 11.10.0 to 13.0.3 #72 was the same 11.10.0 -> 13.0.3 bump that chore(deps): bump better-sqlite3 from 11.10.0 to 13.0.3 #23 shipped and Revert better-sqlite3 to 11.10.0 (v13 can't build on Nixpacks) #61 reverted. I re-checked whether 13.0.3 could land now, because its package.json sets "gypfile": false and the tarball bundles a linux-x64.node prebuild. Reproduced in node:22.14.0-bookworm-slim (no Python, same npm 10.9.2 as the Nixpacks image): a fresh install with no lockfile skips node-gyp and loads the prebuild (SQLite 3.53.4), but npm install or npm ci against a lockfile runs node-gyp rebuild and fails on missing Python, which is exactly the Coolify log for deploy dl2jecpg. npm 11 behaves the same; npm 12 honours the flag. Prod's container: Node 22.14.0, no python3, no g++. So the block is real and the comment names it precisely: it is npm's handling of gypfile, not a missing prebuild.
• tailwindcss semver-major. v4 is a migration (Migrate to Tailwind CSS 4 #77), and chore(deps-dev): bump tailwindcss from 3.4.19 to 4.3.3 #73 fails the build on the moved PostCSS plugin.

12.x of better-sqlite3 still installs via prebuild-install, so Dependabot may now offer 12.11.1; that gets its own verdict. Minor/patch updates for both packages still flow.

Config-only. Checks will run, but nothing in them reads this file; the real proof is Dependabot's next run not reopening either PR.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Automated dependency updates now skip major-version updates for Tailwind CSS and versions 13 and later of better-sqlite3. Other updates remain eligible.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: rheos/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Essentials

Run ID: e437afbf-dd5c-46be-b017-ca7728948730

📥 Commits

Reviewing files that changed from the base of the PR and between 0467237 and 1d91f63.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: This review used your included allowance. 0 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

---

📝 Walkthrough

Walkthrough

The Dependabot npm configuration now ignores better-sqlite3 versions >=13 and Tailwind CSS major updates. Other updates for these packages remain eligible.

Changes

Dependabot update filters

Layer / File(s)	Summary
Add npm ignore rules .github/dependabot.yml	Dependabot ignores better-sqlite3 versions >=13 and Tailwind CSS semver-major updates. Other update types for these packages are not excluded.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other · Severity of issue fixed: Low

Merge Risk: ⚪ Minimal · up to 1d91f

The filters block only the specified better-sqlite3 versions and Tailwind major updates; the requested remaining updates stay eligible. No actionable merge risk remains.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely summarizes the main change: adding Dependabot ignore rules for two updates that cannot currently land.
Linked Issues check	✅ Passed	The change implements the coding requirements in #76. It ignores better-sqlite3 versions >=13 and includes comments that identify the Coolify/Nixpacks, npm, lockfile, Python, and compiler blocker.…
Out of Scope Changes check	✅ Passed	The whole-PR diff changes only .github/dependabot.yml. Both ignore rules and their comments directly support the objectives in #76. No unrelated implementation or configuration change is present.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}