mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-24 12:42:49 +00:00
pulse-triage[bot]
fbfa870b95
The npm-minor-patch group (Dependabot #2115) has been held since 17 Sep because it bundles @playwright/test, playwright and playwright-core 1.56.1 -> 1.63.0 with 12 safe frontend updates. The offline browser-verification runtime is pinned to Playwright 1.56.1, so a lockfile bump breaks browser-proof parity; holding the whole group blocked the safe updates instead. Ignore Playwright version updates on the governed 1.56.1 line, matching the docker governed-tag policy, so the remaining grouped updates can be reviewed on their own. Security updates stay covered by the weekly npm-audit scan and the frontend dependencySecurity proof. Extend the dependabot config guard to lock the policy in. Change-source: pulse-maintainer