gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-24 04:33:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Defer incompatible npm major updates to explicit migrations

Browse Source 
Keep ESLint 10 and lucide-solid 1.x out of automatic version updates while their lockfile and icon-import contracts fail. Preserve minor and patch updates and guard the rule in Dependabot policy tests.

Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot]
2026-09-26 23:17:00 +01:00
parent e85f1a4eed
commit 71c948fa55
2 changed files with 26 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+11
View File
@@ -119,6 +119,17 @@ updates:
- dependency-name: "typescript"
update-types:
- "version-update:semver-major"
# ESLint 10's proposed lockfile drops every js-yaml copy, which breaks the
# checked-in dependency-security contract. Migrate the lint stack and
# its lockfile together rather than accepting an isolated major bump.
- dependency-name: "eslint"
update-types:
- "version-update:semver-major"
# lucide-solid 1.x removes an icon subpath still imported by the app.
# Keep majors explicit until the icon imports and frontend proof migrate.
- dependency-name: "lucide-solid"
update-types:
- "version-update:semver-major"
- package-ecosystem: "docker"
directories: