Skip to content

Comments

Adds ignore rules for specific deps in dependabot config#23

Open
Jwaegebaert wants to merge 1 commit intopnp:mainfrom
Jwaegebaert:dev/dependabotIgnote
Open

Adds ignore rules for specific deps in dependabot config#23
Jwaegebaert wants to merge 1 commit intopnp:mainfrom
Jwaegebaert:dev/dependabotIgnote

Conversation

@Jwaegebaert
Copy link
Contributor

Configure Dependabot to ignore:

  • @actions packages v3.x - These are pure ESM modules incompatible with @vercel/ncc bundler
  • @types/node - Should be updated manually to match GitHub Actions runtime

This prevents build failures like the one in #22 where v3.x @actions packages caused module resolution errors during the ncc build step.

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR configures Dependabot to prevent automatic dependency updates that would break the build. It addresses the issue from PR #22 where v3.x @actions packages (pure ESM modules) caused build failures with the @vercel/ncc bundler.

Changes:

  • Added ignore rules for @actions/core, @actions/exec, and @actions/io to block major version updates to v3.x
  • Added ignore rule for @types/node to require manual updates aligned with the node24 runtime

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant