From d98e16557b562457046cbb37e5e589be94aad9a3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= Date: Wed, 4 Nov 2026 16:54:29 +0100 Subject: [PATCH] chore(deps): keep Node majors out of the image PRs Refs #1334 --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c9406d15a..e3d612e8a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -73,6 +73,12 @@ updates: # (runtime-package-pins.test.ts fails while the two differ). - dependency-name: "postgres" update-types: ["version-update:semver-major"] + # The Node major in the build and runner stages is the one `engines`, + # `.nvmrc` and `.node-version` name, and the native modules are built + # against it. Moving it is a release decision, so it arrives by hand. + # Digest and minor updates of the pinned major still come as PRs. + - dependency-name: "node" + update-types: ["version-update:semver-major"] # The `docker` ecosystem above reads the Dockerfile only. The bundled # database lives in `docker-compose.yml`, which GitHub treats as its own # ecosystem, so without this block a new PostgreSQL minor release never