From 72e410eacbc40aa0c3e569f37d0ad795fe7733f5 Mon Sep 17 00:00:00 2001 From: Allen Hutchison Date: Fri, 27 Mar 2026 23:07:32 +0000 Subject: [PATCH 1/3] chore: split typescript into its own dependabot group TypeScript major version bumps can have peer dependency conflicts with eslint plugins and other tooling. Splitting it into its own group prevents it from blocking unrelated dependency updates. --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d273031e..5c659749 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,6 +9,11 @@ updates: npm-root: patterns: - '*' + exclude-patterns: + - 'typescript' + typescript: + patterns: + - 'typescript' labels: - 'dependencies' - 'npm' @@ -25,6 +30,11 @@ updates: npm-workspace-server: patterns: - '*' + exclude-patterns: + - 'typescript' + typescript: + patterns: + - 'typescript' labels: - 'dependencies' - 'npm' From 16821a57b334ac1228ab05395cc6a833f5d21731 Mon Sep 17 00:00:00 2001 From: Allen Hutchison Date: Mon, 30 Mar 2026 20:28:21 +0000 Subject: [PATCH 2/3] fix: remove duplicate typescript group from workspace-server dependabot config The workspace-server/package.json doesn't list typescript as a dependency, so the group wouldn't match anything. The root-level typescript group already handles it. --- .github/dependabot.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5c659749..024ddd7c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -30,11 +30,6 @@ updates: npm-workspace-server: patterns: - '*' - exclude-patterns: - - 'typescript' - typescript: - patterns: - - 'typescript' labels: - 'dependencies' - 'npm' From 21a8121deb0044d8255c42aa67857ea7c7466548 Mon Sep 17 00:00:00 2001 From: Allen Hutchison Date: Mon, 30 Mar 2026 22:50:41 +0000 Subject: [PATCH 3/3] fix: reorder dependabot groups so typescript matches before catch-all Placing the specific typescript group before the npm-root wildcard group eliminates the need for exclude-patterns and is more maintainable when adding future specific groups. --- .github/dependabot.yml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 024ddd7c..f481ac05 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,14 +6,12 @@ updates: interval: 'weekly' open-pull-requests-limit: 5 groups: - npm-root: - patterns: - - '*' - exclude-patterns: - - 'typescript' typescript: patterns: - 'typescript' + npm-root: + patterns: + - '*' labels: - 'dependencies' - 'npm'