From 187984d7967bc2f5324ac8387e05d7cfc928c0fb Mon Sep 17 00:00:00 2001
From: jbouder <61591423+jbouder@users.noreply.github.com>
Date: Sun, 1 Nov 2026 14:32:00 +0000
Subject: [PATCH] ci(deps): hold Python base image minor at the .python-version
 pin

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .github/dependabot.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e738490..a542cef 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -126,6 +126,11 @@ updates:
     ignore:
       - dependency-name: "node"
         update-types: ["version-update:semver-major"]
+      # The Python minor is pinned in api/.python-version and
+      # mcp/.python-version (CI fails when the image disagrees); move them
+      # together on purpose. Patch and digest updates still flow through.
+      - dependency-name: "python"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
     schedule:
       interval: "monthly"
       day: "monday"