Skip to content

Commit c3a1c12

Browse files
committed
chore(ci): ignored Stimulsoft packages in Dependabot
Stimulsoft.Dashboards.Win and Stimulsoft.Reports.Wpf are pinned at 2022.1.2 because our license only covers that build. Without an ignore rule, Dependabot kept opening upgrade PRs (most recently #72: 2022.1.2 -> 2026.2.2) that must be declined every time. * Pin is enforced in Directory.Packages.props with an inline German comment ("Version bleibt wegen Lizenz!") on the Stimulsoft package versions * Ignore is applied to both sibling packages so neither one drifts ahead of the licensed version * Why a full ignore rather than a version range: the license is specific to 2022.1.2, not a major-version window — any other version is out of scope If the license is ever expanded, remove the ignore block and let Dependabot resume normal updates.
1 parent 6aa3cba commit c3a1c12

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,12 @@ updates:
3333
- "FluentAssertions*"
3434
- "coverlet*"
3535
- "Moq*"
36+
# License-pinned packages: do not update.
37+
# Stimulsoft 2022.1.2 is the version covered by our license — see
38+
# Directory.Packages.props ("Version bleibt wegen Lizenz!").
39+
ignore:
40+
- dependency-name: "Stimulsoft.Dashboards.Win"
41+
- dependency-name: "Stimulsoft.Reports.Wpf"
3642

3743
# GitHub Actions
3844
- package-ecosystem: "github-actions"

0 commit comments

Comments
 (0)