Skip to content

chore(deps): ignore every update type for Expo-pinned packages - #75

Merged
TheStreamCode merged 1 commit into
mainfrom
chore/dependabot-ignore-expo-patch
Nov 9, 2026
Merged

TheStreamCode merged 1 commit into
mainfrom
chore/dependabot-ignore-expo-patch

Conversation

@TheStreamCode

Copy link
Copy Markdown
Owner

Problem

#74 (the regenerated bun group) still fails the Validate job, and only on expo-doctor: it reports patch mismatches for @react-native-community/slider (5.2.2 vs 5.2.1), react/react-dom (19.3.1 vs 19.3.0) and react-native-worklets (0.13.1 vs 0.13.0).

The rules added in #73 covered only minor and major for these packages, so a patch bump still slipped through. expo-doctor compares them by patch too.

Change

Drop update-types for the SDK-pinned packages (react, react-dom, react-test-renderer, react-native, react-native-gesture-handler, react-native-safe-area-context, react-native-worklets, @react-native-community/slider), so every update type is ignored and npx expo install is the only path that moves them.

Verification

.github/dependabot.yml parses as YAML; the bun ecosystem keeps 14 ignore rules and the two ecosystems are unchanged.

expo-doctor compares the SDK-managed packages by patch as well, so the
previous minor+major rules still let the bun group move react, react-dom,
react-test-renderer, react-native-worklets and @react-native-community/slider
off the alignment the SDK requires, and the Validate job failed on the patch
mismatch.

Ignoring all update types for those packages makes `npx expo install` the only
path that changes them.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@TheStreamCode
TheStreamCode merged commit 5f0d987 into main Nov 9, 2026
5 checks passed
@TheStreamCode
TheStreamCode deleted the chore/dependabot-ignore-expo-patch branch November 9, 2026 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant