From debaf769d56e3cca847fb0ae72667c3b68076a58 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ullrich=20Sch=C3=A4fer?= Date: Sun, 19 Apr 2026 10:58:05 +0200 Subject: [PATCH] Tighten dependabot ignore rules - Skip major bumps on @types/jest + @types/node so the types stay aligned with the runtime (jest 29 with @types/jest 29, not 30). - Skip react-native itself since it's pinned by the Expo SDK and should only move when we bump Expo. Community react-native-* libraries stay on the normal weekly cadence. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a888efe..21f282c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,6 +12,18 @@ updates: development: dependency-type: "development" open-pull-requests-limit: 10 + ignore: + # Keep @types/* aligned with the runtime major. Mismatched type + # packages (e.g. @types/jest 30 while jest is still 29) break + # typecheck without buying us anything. + - dependency-name: "@types/jest" + update-types: ["version-update:semver-major"] + - dependency-name: "@types/node" + update-types: ["version-update:semver-major"] + # react-native is pinned by the Expo SDK — upgrade it via an Expo + # SDK bump, not on its own. Community react-native-* libraries are + # intentionally NOT ignored here; they can be bumped independently. + - dependency-name: "react-native" - package-ecosystem: "github-actions" directory: "/"