Skip to content

ci: Fix Dependabot config - #216

Merged
bennycode merged 2 commits into
mainfrom
fix/dependabot-config
Oct 1, 2026
Merged

bennycode merged 2 commits into
mainfrom
fix/dependabot-config

Conversation

@bennycode

@bennycode bennycode commented Oct 1, 2026 •

Copy link
Copy Markdown
Owner

Dependabot pull requests have been piling up and never merged. This fixes the config.

  • Removes the ignore rules for @types/node >= 19 and eslint >= 9. Since chore(deps): Upgrade dependencies to their latest major versions #214 the project is on @types/node 26 and ESLint 10, so these rules blocked every future update for both.
  • Ignores typescript >= 7 instead. TypeScript 7 doesn't ship the JavaScript compiler API, which ts-morph and typescript-eslint need, so every such update would fail CI. Remove this rule once the tooling supports TypeScript 7.
  • Removes day: 'tuesday'. Dependabot only uses day for weekly schedules, so it had no effect with interval: 'monthly'.
  • Groups minor and patch npm updates into a single pull request per run. Separate PRs for the same lockfile conflicted with each other after each merge. Major updates still get their own PR.

The ignore rules for @types/node >= 19 and eslint >= 9 blocked all
updates for both packages, which are now on 26 and 10. They are removed.
TypeScript >= 7 is ignored instead, because it has no JavaScript compiler
API, which ts-morph and typescript-eslint need.

"day" was removed from both schedules, because Dependabot only uses it
for weekly intervals. Minor and patch npm updates are grouped into one
pull request per run, so they no longer conflict with each other.

The "Approve PR" step in the auto-merge workflow always failed, because
GitHub Actions is not allowed to approve pull requests in this repository.
Branch protection only requires the test-coverage check, not an approval,
so the step is removed.
@bennycode bennycode changed the title ci: Fix Dependabot config and auto-merge workflow ci: Fix Dependabot config Oct 1, 2026
@bennycode
bennycode merged commit 6d4e83f into main Oct 1, 2026
2 checks passed
@bennycode
bennycode deleted the fix/dependabot-config branch October 1, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant