From 779bc560fc74ce3168d80f7b5835e31b2a8854c2 Mon Sep 17 00:00:00 2001 From: Mirotin Artem Date: Sat, 8 Aug 2026 00:00:54 +0300 Subject: [PATCH 1/2] build(deps): ignore TypeScript majors until the lint toolchain is ready MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit typescript-eslint's newest release (8.66.0) pins typescript >=4.8.4 <6.1.0, so a TS-major dependabot PR can only ever be red — #224 (TS 7.0.2) failed both Frontend Build and Frontend Lint on typescript-estree crashing. Ignore semver-major for typescript; the comment marks when to lift it. --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 76187c95..761bec6f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -32,6 +32,14 @@ updates: # A silently truncated queue is worse than a long one — it looks like # "nothing else to update". open-pull-requests-limit: 10 + # TypeScript majors are gated by the lint toolchain, not by us: + # typescript-eslint pins `typescript >=4.8.4 <6.1.0` (checked at + # 8.66.0, 2026-08-08), so a TS major PR can only ever be red (#224: + # typescript-estree crashes against TS 7). REMOVE this entry once + # typescript-eslint publishes support for the next TS major. + ignore: + - dependency-name: "typescript" + update-types: ["version-update:semver-major"] # react and react-dom must move in lockstep — react-dom hard-fails on a # version skew ("Incompatible React versions"). Group them (with their # @types) so a bump is one coherent PR instead of a react-only PR that From 61a0b4f91f3999a875de760013628a760e62de0d Mon Sep 17 00:00:00 2001 From: Mirotin Artem Date: Sat, 8 Aug 2026 00:04:48 +0300 Subject: [PATCH 2/2] review: extend the typescript ignore to minors (Copilot on #228) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The peer pin is <6.1.0, so TS 6.1 — a semver-minor — is just as incompatible as TS 7; ignoring only majors would still let a guaranteed- red 6.1 PR through. Patches remain allowed, and the comment now names the exact command to check before lifting the rule. --- .github/dependabot.yml | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 761bec6f..a9d5582a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -32,14 +32,19 @@ updates: # A silently truncated queue is worse than a long one — it looks like # "nothing else to update". open-pull-requests-limit: 10 - # TypeScript majors are gated by the lint toolchain, not by us: - # typescript-eslint pins `typescript >=4.8.4 <6.1.0` (checked at - # 8.66.0, 2026-08-08), so a TS major PR can only ever be red (#224: - # typescript-estree crashes against TS 7). REMOVE this entry once - # typescript-eslint publishes support for the next TS major. + # TypeScript majors AND minors are gated by the lint toolchain, not + # by us: typescript-eslint pins `typescript >=4.8.4 <6.1.0` (checked + # at 8.66.0, 2026-08-08), so even a 6.1 minor lands outside the peer + # range — a TS bump PR beyond patch level can only ever be red + # (#224: typescript-estree crashes against TS 7). Patches stay + # allowed. LIFT this entry (or bump TS by hand) whenever + # typescript-eslint's peer range moves — check + # `npm view typescript-eslint peerDependencies`. ignore: - dependency-name: "typescript" - update-types: ["version-update:semver-major"] + update-types: + - "version-update:semver-major" + - "version-update:semver-minor" # react and react-dom must move in lockstep — react-dom hard-fails on a # version skew ("Incompatible React versions"). Group them (with their # @types) so a bump is one coherent PR instead of a react-only PR that