From 1b12f69cbc70163be9b21d4b54c6bcf290dc0856 Mon Sep 17 00:00:00 2001 From: Joost de Valk Date: Sat, 8 Aug 2026 12:05:09 +0200 Subject: [PATCH] build(deps): stop Dependabot proposing the typescript major bump MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit @astrojs/check 0.9.10 peers typescript "^5.0.0 || ^6.0.0". Any bump to v7 makes `npm ci` fail with ERESOLVE, so every job in every workflow dies at install — and because typescript sits in the `dev-deps` group, it takes the other five bumps down with it. This has now happened twice: #155 was opened, never went green, and was closed; Dependabot immediately regenerated it as #164, which fails identically. Left alone it recurs every Monday. Ignores major updates for typescript in the root manifest only. /mcp keeps typescript ^7 — it has no @astrojs/check, so nothing there conflicts. Re-allow once @astrojs/check widens its peer range. Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 28db806e..7211ca77 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,15 @@ updates: interval: weekly day: monday open-pull-requests-limit: 5 + ignore: + # @astrojs/check 0.9.10 peers typescript "^5.0.0 || ^6.0.0", so a v7 + # bump makes `npm ci` fail with ERESOLVE and every job in every + # workflow dies at install (#155, #164 — both regenerated weekly and + # neither could ever go green). The bump also drags the rest of the + # dev-deps group down with it. Re-allow once @astrojs/check widens + # its peer range to accept v7. + - dependency-name: "typescript" + update-types: ["version-update:semver-major"] groups: astro: patterns: