Skip to content

docs(dependabot): allow covers version updates only - #32

Merged
lucas-d-ramos merged 1 commit into
mainfrom
docs/dependabot-allow-comment
Oct 26, 2026
Merged

lucas-d-ramos merged 1 commit into
mainfrom
docs/dependabot-allow-comment

Conversation

@lucas-d-ramos

Copy link
Copy Markdown
Contributor

Comment-only change to .github/dependabot.yml; no setting changes.

Dependabot ignores allow: dependency-type for security updates (allowed_update? in dependabot-core), so security fixes for packages of packages still arrive and take the normal path (auto-merge for patch/minor where the tier has it, a person for a major). That is kept on purpose; the old comment said allow stopped them. Canonical text: WeMoveEU/dependency-policy#33.

🤖 Generated with Claude Code

Dependabot ignores `allow: dependency-type` for security updates, so
security fixes reach packages of packages too and take the normal path.
Kept on purpose; the comment said `allow` stopped them. Comment-only.
Canonical text: WeMoveEU/dependency-policy#33.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
@lucas-d-ramos
lucas-d-ramos merged commit ef1d6e6 into main Oct 26, 2026
1 check passed
@lucas-d-ramos
lucas-d-ramos deleted the docs/dependabot-allow-comment branch October 26, 2026 12:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant