Skip to content

chore(deps): stop Dependabot proposing vitest majors #417

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kikootwo merged 3 commits into from
Oct 20, 2026
Merged

chore(deps): stop Dependabot proposing vitest majors #417

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f327cd7
chore(deps): stop Dependabot proposing vitest majors
kikootwo Oct 20, 2026
3f69960
Merge origin/main (024da94) into chore/dependabot-ignore-vitest-majors
kikootwo Oct 20, 2026
211e748
chore(deps): correct the ioredis ignore comment: Bull shares the one …
kikootwo Oct 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,14 +30,20 @@ updates:
# tests fail on it); a major needs a migration of that code. Upgrade by hand.
- dependency-name: "zod"
update-types: ["version-update:semver-major"]
# ioredis backs the startup Redis readiness check (Bull brings its own copy for the queue).
# PR CI mocks it and has no Redis, so a major can't be checked there. Upgrade by hand.
# ioredis is the Redis client for the job queue (Bull uses this same copy) and the startup
# readiness check. PR CI mocks it and has no Redis, so a major can't be checked there. Upgrade by hand.
- dependency-name: "ioredis"
update-types: ["version-update:semver-major"]
# An eslint major has to be checked against eslint-config-next, and PR CI doesn't run the
# linter. Upgrade by hand.
- dependency-name: "eslint"
update-types: ["version-update:semver-major"]
# vitest 5 fails this test suite. Closing a grouped PR doesn't stop Dependabot reopening
# it, so vitest majors are ignored here and moved by hand when there is a reason to.
- dependency-name: "vitest"
update-types: ["version-update:semver-major"]
- dependency-name: "@vitest/*"
update-types: ["version-update:semver-major"]
groups:
# Listed first: Dependabot puts a dependency in the FIRST group that matches,
# so prisma and @prisma/client always move together instead of splitting
Expand Down
Loading