mirror of
https://github.com/github/codeql-action.git
synced 2026-11-05 04:29:40 +00:00
Configure Dependabot to ignore undici for the moment
This commit is contained in:
8
.github/dependabot.yml
vendored
8
.github/dependabot.yml
vendored
@@ -16,6 +16,14 @@ updates:
|
||||
# This might be fixed when we move to eslint v9.
|
||||
- dependency-name: "eslint-plugin-import"
|
||||
versions: [">=2.30.0"]
|
||||
|
||||
# Some of our dependencies are lagging behind with support for new versions of
|
||||
# `undici` which is why we have to override it in `package.json`. Dependabot
|
||||
# workflows fail when they try to update a dependency that is explicitly
|
||||
# overriden. Since this happens somewhat routinely at the moment, we are
|
||||
# excluding `undici` here and have to manually update it when needed.
|
||||
- dependency-name: "undici"
|
||||
versions: [">=7.30.1"]
|
||||
groups:
|
||||
npm-minor:
|
||||
patterns:
|
||||
|
||||
Reference in New Issue
Block a user