Skip to content

Tighten Dependabot update policy#8

Merged
apcar merged 1 commit into
mainfrom
agent/dependabot-guardrails
Jul 21, 2026
Merged

Tighten Dependabot update policy#8
apcar merged 1 commit into
mainfrom
agent/dependabot-guardrails

Conversation

@apcar

@apcar apcar commented Jul 21, 2026

Copy link
Copy Markdown
Owner

What changed

  • move routine npm version updates to a monthly cadence
  • keep development dependency grouping limited to minor and patch updates
  • ignore semver-major version bumps from automated PR creation

Why

The first Dependabot run opened separate major-version PRs, including incompatible TypeScript and ESLint upgrades. PageParcel should receive security alerts and manageable routine updates without publishing a noisy, immediately red maintenance queue.

Validation

  • Dependabot YAML passes Prettier validation
  • the change is configuration-only
  • required repository CI will run before merge

@apcar
apcar marked this pull request as ready for review July 21, 2026 22:22
@apcar
apcar merged commit 9049295 into main Jul 21, 2026
1 check passed
@apcar
apcar deleted the agent/dependabot-guardrails branch July 21, 2026 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant