Files
setup-task/.github
per1234 c5e1c67aa3 Prevent inappropriate @types/node bumps from Dependabot
The project has a dependency on the `@types/node` package. This package follows the major version of Node.js.

https://stackoverflow.com/questions/42035263/relationship-between-the-version-of-node-js-and-the-version-of-types-node

Since we are now using Node.js 16.x for the development of the project, we must also use the ^16.x series of
`@types/node`.

Since there are 17.x versions of the `@types/node` package available, Dependabot would submit unwanted PRs to bump the
dependency to those versions. This configuration prevents that. Dependabot will continue to submit PRs for bumps to any
new minor or patch releases made within the current major version series.

Since this configuration prevents Dependabot from submitting major version bumps, The `@types/node` dependency version
must be updated manually when we update to using a new major version of Node.js for the development of this project.

Reference:
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#specifying-dependencies-and-versions-to-ignore
2022-01-12 20:50:12 -08:00
..