Commit 43dd9a6
authored
Prevent inappropriate
The project has a dependency on the `@types/node` package. That package follows the major version of Node.js.
https://stackoverflow.com/questions/42035263/relationship-between-the-version-of-node-js-and-the-version-of-types-node
Since we are now using Node.js 16.x for the development of the project, we must also use the ^16.x series of
`@types/node`.
Because there are 17.x versions of the `@types/node` package available, Dependabot would submit unwanted PRs to bump the
dependency to those versions. This configuration prevents that. Dependabot will continue to submit PRs for bumps to any
new minor or patch releases made within the current major version series.
Since this configuration prevents Dependabot from submitting major version bumps, The `@types/node` dependency version
must be bumped manually when we update to using a new major version of Node.js for the development of this project.
Reference:
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#specifying-dependencies-and-versions-to-ignore@types/node bumps from Dependabot1 parent 166c7c0 commit 43dd9a6
1 file changed
+6
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
0 commit comments