Skip to content

Commit 08aff98

Browse files
committed
ci(dependabot): ignore canary prereleases
Dependabot proposed a commit-hash canary build because "canary" sorts after "beta" in semver prerelease ordering. Canary builds are nightly snapshots published under their own dist-tag, not releases, so they are never a valid upgrade target for a pinned dependency. Both midnight scopes are in use, so both are covered.
1 parent 1f2d1ff commit 08aff98

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,13 @@ updates:
66
interval: "daily"
77
open-pull-requests-limit: 5
88
rebase-strategy: "auto"
9+
ignore:
10+
# Nightly canary snapshots are not releases, but "canary" sorts after
11+
# "beta", so Dependabot would otherwise propose them.
12+
- dependency-name: "@midnight-ntwrk/*"
13+
versions: ["*-canary*"]
14+
- dependency-name: "@midnightntwrk/*"
15+
versions: ["*-canary*"]
916

1017
- package-ecosystem: "github-actions"
1118
directory: "/"

0 commit comments

Comments
 (0)