Skip to content

fix(deps): align Dependabot with pnpm policy - #179

Merged
ericyangpan merged 2 commits into
mainfrom
codex/dependabot-pnpm-hardening
Jul 29, 2026
Merged

fix(deps): align Dependabot with pnpm policy#179
ericyangpan merged 2 commits into
mainfrom
codex/dependabot-pnpm-hardening

Conversation

@ericyangpan

Copy link
Copy Markdown
Contributor

Summary

  • apply a 3-day Dependabot cooldown so generated pnpm lockfiles do not bypass the repository release-age quarantine
  • remove the invalid team assignee entry that Dependabot cannot apply
  • keep @types/node aligned with the supported Node 22 runtime

Validation

  • parsed .github/dependabot.yml with Ruby YAML
  • asserted cooldown, ignore rule, and assignee removal
  • git diff --check

GitHub configuration shapes were checked against the current official Dependabot options reference.

@ericyangpan
ericyangpan requested a review from a team as a code owner July 29, 2026 17:44
@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Preview deployment

Status URL
Ready https://pr-179-aicodingstack.pr-preview.workers.dev

Commit: 2f43e77
Updated: 2026-07-29T18:00:07.361Z

@ericyangpan
ericyangpan force-pushed the codex/dependabot-pnpm-hardening branch from 7426cb6 to 3903bbd Compare July 29, 2026 17:50
@ericyangpan
ericyangpan enabled auto-merge July 29, 2026 17:56
@ericyangpan
ericyangpan merged commit 400ff69 into main Jul 29, 2026
12 of 13 checks passed
@ericyangpan
ericyangpan deleted the codex/dependabot-pnpm-hardening branch July 29, 2026 18:00
@github-actions

Copy link
Copy Markdown
Contributor

Preview deployment cleaned up

The preview deployment for PR #179 has been removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant