ci(dependabot): ignore eslint major upgrades

[ronload]

Summary

• Tell Dependabot to skip version-update:semver-major for eslint in the npm ecosystem.
• Unblocks the grouped dev-dependencies PR (build(deps-dev): bump the dev-dependencies group with 7 updates #24), which was trying to pull ESLint from 9.39.4 to 10.2.1.

Why

PR #24 failed CI with:

TypeError: Error while loading rule 'react/display-name':
contextOrFilename.getFilename is not a function
  at resolveBasedir (.../eslint-plugin-react/lib/util/version.js:31:100)

eslint-plugin-react@7.37.5 (a transitive dependency of eslint-config-next@16.2.4) is not yet compatible with ESLint 10 — it still calls the pre-10 context.getFilename() API as a function rather than via context.filename. Until the plugin catches up, any ESLint 10 upgrade will break pnpm lint.

Grouping means a single incompatible major bump blocks six otherwise-fine patch/minor bumps. Ignoring major eslint updates keeps the group shippable.

Follow-up

After this merges:

1. Close build(deps-dev): bump the dev-dependencies group with 7 updates #24 — Dependabot will recreate a clean group PR on the next weekly schedule without the ESLint 10 bump.
2. Once eslint-plugin-react (or eslint-config-next) ships ESLint 10 support, drop this ignore rule.

Test plan

• Green CI on this PR (no code change, config-only).
• After merge, confirm Dependabot's next grouped dev-deps PR stays on ESLint 9.x.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
zipkit	Ready	Preview, Comment	Apr 24, 2026 7:37am