From bc44676fb40d1b09327cedbf314c4b0846458e67 Mon Sep 17 00:00:00 2001 From: Hernan Date: Wed, 21 Oct 2026 18:23:04 -0300 Subject: [PATCH] Dependabot: stop proposing major version updates Majors for packages and base images are taken by hand; Actions majors are still proposed since they are the only way to clear runtime deprecations. Co-Authored-By: Claude Fable 5.1 --- .github/dependabot.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index acd832a..d63e539 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,6 @@ # Dependabot version updates: monthly, grouped so each ecosystem yields one PR for -# minor and patch bumps; major bumps come as separate PRs. +# minor and patch bumps. Major bumps are ignored for packages and base images (they are +# taken deliberately by hand); GitHub Actions majors are still proposed. version: 2 updates: - package-ecosystem: github-actions @@ -16,3 +17,6 @@ updates: groups: minor-and-patch: update-types: ["minor", "patch"] + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"]