Repository navigation
chore: ignore TypeScript dev builds in Dependabot while the pin is a beta - #245
Merged
Merged
Conversation
bompus
added
author:anthropic
![bompus-ai-review[bot]](https://avatars.githubusercontent.com/in/5532859?s=60&v=4){kind=small}
This was referenced Nov 6, 2026
bompus
added a commit
that referenced
this pull request
Nov 7, 2026
Set the version to 0.10.0 in package.json, packages/mcp-relay/package.json and both server.json fields, and date the changelog section. The release covers #244: separate projects for keys that differ only by punctuation, empty and oversized reservation paths rejected, glob reservations that match, and strict timestamps. #241, #243 and #245 change nothing users run.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds the TypeScript dev-build ignore rule to the
bunentry of.github/dependabot.yml, copied byte for byte from house-rules (#552). Nothing else changes.Why:
package.jsonpinstypescriptto the exact prerelease7.1.0-beta. Dependabot then also offers newer prereleases of that line, and the nightly7.1.0-dev.*builds sort above the beta, so #242 (7.1.0-betato7.1.0-dev.20261102.1) opened one minute after #241 added the config. The rule ignores>=7.1.0-dev <7.1.0-rcand>=7.2.0-dev <7.2.0-rc; betas, rcs and releases are still proposed. Move the ranges when the pin moves.Contract: must stop dev-build bumps; must not touch the github-actions entry, the schedules or any other file. Accepted residual: GitHub does not document prerelease syntax in
ignore.versions; the same rule works in house-rules and sigflint (no TypeScript dev PR since it landed there), and a reviewer traced the range through dependabot-core's bun requirement parser.Checks:
bun run checkpasses. Review: SWE-2 (Cognition) found nothing blocking (two nits: the range also covers other prerelease tags betweendevandrc, and a nightly line that jumps past7.2would return dev PRs until the ranges move); Sol was over quota, so only one reviewer family read it.Closes #242's cause; #242 is closed separately.