Skip to content

ci(deps): ignore typescript major-version bumps in dependabot config - #13

Merged
asachs01 merged 1 commit into
mainfrom
fix/ignore-typescript-major-dependabot
Aug 13, 2026
Merged

ci(deps): ignore typescript major-version bumps in dependabot config#13
asachs01 merged 1 commit into
mainfrom
fix/ignore-typescript-major-dependabot

Conversation

@asachs01

@asachs01 asachs01 commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Why

typescript 7.x breaks this fleet's toolchain:

  • DTS emit via tsup/rollup-plugin-dts throws TS5101 ("baseUrl deprecated") as a hard error.
  • typescript-eslint still caps its peer range below typescript 6.1.0 as of its latest 8.66.0 release — no TS7 support yet.

Several repos in the fleet have already had this manually fixed once (typescript pinned back down), only for Dependabot to re-propose and re-merge the exact same breaking major bump later, because Dependabot has no memory of a prior manual revert. This broke main on 5 repos across the fleet.

What

Adds an ignore: block to .github/dependabot.yml (sibling to groups:) that blocks Dependabot from proposing typescript semver-major updates, until typescript-eslint and the tsup/rollup-plugin-dts toolchain support TS7. This is a deliberate, temporary hold — not a permanent blind — and should be removed once the toolchain catches up.

Config-only change, no application code or tests affected.

🤖 Generated with Claude Code


View with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is enabled.

typescript 7.x breaks this fleet's toolchain: DTS emit via tsup/rollup-plugin-dts
throws TS5101 (baseUrl deprecated) as a hard error, and typescript-eslint still
caps its peer range below typescript 6.1.0 as of 8.66.0 (no TS7 support yet).

This has broken main multiple times fleet-wide because Dependabot has no memory
of a prior manual revert and just re-proposes the same major bump again. This
adds a deliberate ignore rule for typescript semver-major bumps until the
toolchain catches up.
@asachs01
asachs01 merged commit a3da41e into main Aug 13, 2026
3 checks passed
@asachs01
asachs01 deleted the fix/ignore-typescript-major-dependabot branch August 13, 2026 12:38
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 1.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant