ci: stop Dependabot from bundling major-version bumps#89
Merged
Conversation
…ps group PR #88 ("dev-dependencies group with 11 updates") broke the Vercel build because Dependabot's dev-dependencies group had no update-types filter, so it bundled FIVE major-version bumps together: - Prisma 6 → 7 (removes url/directUrl from schema.prisma — needs new prisma.config.ts; this was the immediate build failure) - TypeScript 5 → 6 - Tailwind 3 → 4 (major CSS-tooling rewrite) - ESLint 8 → 10 (peer-dep warnings on eslint-plugin-import/jsx-a11y/react) - eslint-config-next 14 → 16 Each of those needs a dedicated migration PR. Fix: add `update-types: minor + patch` to the dev-dependencies group (matching the minor-and-patch group) so majors land as their own PRs, and add an `ignore: version-update:semver-major` block for the specific deps with known migration cost so they don't churn the PR queue until we're ready to migrate. Currently ignored at the major level: prisma, @prisma/client, tailwindcss, typescript, eslint, eslint-config-next, next, react, react-dom Closing PR #88. PR #87 (the minor-and-patch group) is unaffected and safe to merge. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This was referenced May 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What broke
PR #88 broke the Vercel build because Dependabot's `dev-dependencies` group had no update-types filter, so it bundled five major-version bumps together (Prisma 6→7, TypeScript 5→6, Tailwind 3→4, ESLint 8→10, eslint-config-next 14→16). Prisma 7's schema-format change (`url` / `directUrl` move to a new `prisma.config.ts`) was the immediate failure.
What this PR does
What this PR doesn't do
Each ignored package can be unblocked individually when we want to do the migration. The order I'd suggest tackling them later:
Closed alongside this
To do after this lands
🤖 Generated with Claude Code