Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,16 @@ updates:
day: "monday"
open-pull-requests-limit: 10
labels: ["dependencies", "security"]
# Skip major bumps for test-infra dev deps that have known breaking
# changes between major versions. Re-enable when bandwidth opens to
# update the test suite for the new APIs. Decision: 2026-05-06,
# after #38 (pytest 8→9) and #40 (pytest-asyncio 0.24→1.3) failed
# tests with no urgency to upgrade.
ignore:
- dependency-name: "pytest"
update-types: ["version-update:semver-major"]
- dependency-name: "pytest-asyncio"
update-types: ["version-update:semver-major"]
# Group patch + minor updates into a single PR per package-ecosystem.
# Major bumps still get their own PR for human review. Mergify
# batches the resulting PR group via .mergify.yml's "dependencies"
Expand Down
Loading