From b0ce1f170d0d587ddb73dbe5ffef55aa17110a50 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sa=C3=BAl=20Cabrera?= Date: Wed, 28 Oct 2026 17:14:14 -0400 Subject: [PATCH] Prefer doing Wasmtime upgrades by hand Ignore Wasmtime major bumps and deterministic-wasi-ctx in Dependabot. These must be updated in lockstep and usually need code changes, so the automated PRs always fail. --- .github/dependabot.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9250be3d..1fe50fb5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,13 +5,20 @@ updates: schedule: interval: "monthly" open-pull-requests-limit: 100 + # Wasmtime major upgrades are done by hand: they must be bumped in + # lockstep with other crates (e.g. `deterministic-wasi-ctx`) and + # usually require code changes, so Dependabot PRs for them never + # succeed on their own. + ignore: + - dependency-name: "wasmtime*" + update-types: ["version-update:semver-major"] + - dependency-name: "deterministic-wasi-ctx" groups: wasmtime: patterns: - "wasmtime*" nonbreaking: exclude-patterns: - - "deterministic-wasi-ctx" - "rquickjs*" update-types: - "minor"