From 515fac0ed05bbb94fd6f24a99f8d2e47c2c8f909 Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Mon, 26 Oct 2026 13:00:49 +0000 Subject: [PATCH] Configure Dependabot to ignore `undici` for the moment --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0e0dd0cce..9a647b182 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,6 +16,14 @@ updates: # This might be fixed when we move to eslint v9. - dependency-name: "eslint-plugin-import" versions: [">=2.30.0"] + + # Some of our dependencies are lagging behind with support for new versions of + # `undici` which is why we have to override it in `package.json`. Dependabot + # workflows fail when they try to update a dependency that is explicitly + # overriden. Since this happens somewhat routinely at the moment, we are + # excluding `undici` here and have to manually update it when needed. + - dependency-name: "undici" + versions: [">=7.30.1"] groups: npm-minor: patterns: