Skip to content

馃敀 Preserve compatibility dependency baselines - #19

Merged
IsaacInsoll merged 1 commit into
mainfrom
chore/dependabot-compatibility-policy
Aug 3, 2026
Merged

IsaacInsoll merged 1 commit into
mainfrom
chore/dependabot-compatibility-policy

Conversation

@IsaacInsoll

@IsaacInsoll IsaacInsoll commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Summary

  • keep React 18/19 and TypeScript 5.5/6/7 test axes under deliberate manual coordination
  • keep root Node types on the Node 22 support major
  • retain Dependabot security-update eligibility for every ignored routine dependency
  • document the dependency-maintenance rule for contributors

Context

Dependabot PR #18 attempted to normalize intentionally different workspace versions, replacing the React 18 and TypeScript 5.5 fixtures and moving root Node types to Node 26. The strict type and packed-consumer checks correctly rejected it, so #18 was closed rather than repaired into a policy-breaking update.

GitHub documents that ignore.update-types applies to routine version updates, not security updates.

Verification

  • corepack npm run format:check
  • corepack npm run lint
  • parsed .github/dependabot.yml with Ruby Psych
  • git diff --check

@IsaacInsoll
IsaacInsoll merged commit ded2411 into main Aug 3, 2026
6 checks passed
@IsaacInsoll
IsaacInsoll deleted the chore/dependabot-compatibility-policy branch August 3, 2026 04:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants