Skip to content

Ignore Dependabot major updates for GitHub Actions - #14

Merged
stackloomdev merged 1 commit into
mainfrom
agent/dependabot-actions-policy
Jul 24, 2026
Merged

stackloomdev merged 1 commit into
mainfrom
agent/dependabot-actions-policy

Conversation

@stackloomdev

Copy link
Copy Markdown
Owner

What changed

  • Ignore semantic-version major updates for the github-actions ecosystem.
  • Keep minor and patch action updates grouped.
  • Prevent a repeat of the incompatible pnpm/action-setup 4 to 6 PR.

Validation

  • Parsed .github/dependabot.yml as YAML
  • Asserted both npm and GitHub Actions ignore semantic-version majors
  • Ran git diff --check

Privacy and compatibility

No runtime data, production bundle, package API, or privacy behavior changes.

@stackloomdev
stackloomdev marked this pull request as ready for review July 24, 2026 22:40
@stackloomdev
stackloomdev merged commit 1e4e198 into main Jul 24, 2026
3 checks passed
@stackloomdev
stackloomdev deleted the agent/dependabot-actions-policy branch July 24, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant