From f327cd7f81591aab7aa239a79287c0a97de28e87 Mon Sep 17 00:00:00 2001 From: kikootwo Date: Tue, 20 Oct 2026 15:35:53 -0400 Subject: [PATCH 1/2] chore(deps): stop Dependabot proposing vitest majors vitest 5 fails the test suite, and closing a grouped Dependabot PR does not stop it reopening. Ignore vitest and @vitest/* majors; minor, patch and security updates still arrive. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 276abfe7..d9b14e6f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -38,6 +38,12 @@ updates: # linter. Upgrade by hand. - dependency-name: "eslint" update-types: ["version-update:semver-major"] + # vitest 5 fails this test suite. Closing a grouped PR doesn't stop Dependabot reopening + # it, so vitest majors are ignored here and moved by hand when there is a reason to. + - dependency-name: "vitest" + update-types: ["version-update:semver-major"] + - dependency-name: "@vitest/*" + update-types: ["version-update:semver-major"] groups: # Listed first: Dependabot puts a dependency in the FIRST group that matches, # so prisma and @prisma/client always move together instead of splitting From 211e7485b10defa2074d9a63c77688f61b08d9c6 Mon Sep 17 00:00:00 2001 From: kikootwo Date: Tue, 20 Oct 2026 16:37:36 -0400 Subject: [PATCH 2/2] chore(deps): correct the ioredis ignore comment: Bull shares the one ioredis Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d9b14e6f..139120ca 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -30,8 +30,8 @@ updates: # tests fail on it); a major needs a migration of that code. Upgrade by hand. - dependency-name: "zod" update-types: ["version-update:semver-major"] - # ioredis backs the startup Redis readiness check (Bull brings its own copy for the queue). - # PR CI mocks it and has no Redis, so a major can't be checked there. Upgrade by hand. + # ioredis is the Redis client for the job queue (Bull uses this same copy) and the startup + # readiness check. PR CI mocks it and has no Redis, so a major can't be checked there. Upgrade by hand. - dependency-name: "ioredis" update-types: ["version-update:semver-major"] # An eslint major has to be checked against eslint-config-next, and PR CI doesn't run the