From 1606099005481efa71b13cc1974d24b691a7c8ac Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Mon, 19 Oct 2026 15:09:50 +0200 Subject: [PATCH] build(deps): keep the Next.js packages out of the weekly groups A red Next bump inside the production group held the twelve harmless updates next to it red as well. The three Next packages open as single pull requests, so each is judged on its own checks. --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b22647ae1..95944b652 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,16 +13,25 @@ updates: # One weekly pull request per dependency kind instead of a trickle of # single bumps: patch and minor updates travel together and pass the # same checks once. Majors stay single so each gets its own review. + # + # The Next.js line travels alone: while a 16.4 patch is still being + # re-measured, a red Next bump inside the group holds every harmless + # update in it red as well. production-weekly: dependency-type: "production" update-types: - "patch" - "minor" + exclude-patterns: + - "next" development-weekly: dependency-type: "development" update-types: - "patch" - "minor" + exclude-patterns: + - "eslint-config-next" + - "@next/bundle-analyzer" ignore: # Next 16.4.0 breaks URL state after history traversal: with a sheet # opened through `?doc=`, Back leaves it open, and `[` / `]` sometimes