From 65bd8a1b3f0174e4cf8a6d1e3039a9b628a2338e Mon Sep 17 00:00:00 2001 From: Dan Schultz Date: Wed, 9 Aug 2023 12:28:10 -0400 Subject: [PATCH 1/2] Ignore node-fetch v3 updates Node-fetch decided to drop support for common js in version 3, which makes it incompatible with our project. We want to stay on v2 --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7813f51..9660ac6 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: directory: "/" schedule: interval: "weekly" + ignore: + - dependency-name: "node-fetch" + update-types: ["version-update:semver-major"] + - package-ecosystem: "github-actions" directory: ".github/workflows" schedule: From 96fc7ad36c9cd57e79826bf288efb6246ccd4722 Mon Sep 17 00:00:00 2001 From: Dan Schultz Date: Wed, 9 Aug 2023 12:29:12 -0400 Subject: [PATCH 2/2] Check for package updates daily This change may be reverted some day, but for now it looks like dependabot might be missing some updates and it isn't clear what the downside of daily will be. --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9660ac6..75851a5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,7 @@ updates: - package-ecosystem: "npm" directory: "/" schedule: - interval: "weekly" + interval: "daily" ignore: - dependency-name: "node-fetch" update-types: ["version-update:semver-major"]