From cd26ae8f7c5119206174b5654f559e9b793effd3 Mon Sep 17 00:00:00 2001
From: Aaron Sachs <898627+asachs01@users.noreply.github.com>
Date: Thu, 13 Aug 2026 12:37:52 +0000
Subject: [PATCH] ci(deps): ignore typescript major-version bumps in dependabot
 config

typescript 7.x breaks this fleet's toolchain: DTS emit via tsup/rollup-plugin-dts
throws TS5101 (baseUrl deprecated) as a hard error, and typescript-eslint still
caps its peer range below typescript 6.1.0 as of 8.66.0 (no TS7 support yet).

This has broken main multiple times fleet-wide because Dependabot has no memory
of a prior manual revert and just re-proposes the same major bump again. This
adds a deliberate ignore rule for typescript semver-major bumps until the
toolchain catches up.
---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f382e21..258673c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -29,6 +29,15 @@ updates:
         update-types: ["minor", "patch"]
     # Production MAJORS are intentionally NOT grouped → individual PRs, held for
     # human review (never auto-merged).
+    ignore:
+      # typescript 7.x breaks this fleet's toolchain: DTS emit (tsup/rollup-plugin-dts
+      # TS5101 baseUrl-deprecated-as-error), and typescript-eslint (still <6.1.0 as of
+      # 8.66.0, no TS7 support yet). Has broken main 3x on some repos because Dependabot
+      # has no memory of a prior manual revert and just re-proposes the same major again.
+      # Deliberate hold, not a permanent blind -- remove once typescript-eslint + the
+      # tsup/DTS toolchain support TS7.
+      - dependency-name: "typescript"
+        update-types: ["version-update:semver-major"]
 
   - package-ecosystem: "github-actions"
     directory: "/"