Haozhe Wu
985f0e1b18
The <3.0.0 ceiling in pyproject.toml/requirements.txt is a deliberate pin (pandas 3.x has real breaking API changes we haven't vetted), not an oversight Dependabot should "fix" by widening it. #494 closed.
29 lines
841 B
YAML
29 lines
841 B
YAML
version: 2
|
|
updates:
|
|
# Root Python project (pyproject.toml).
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
ignore:
|
|
# pandas 3.x has real breaking changes (Copy-on-Write always-on, removed
|
|
# deprecated APIs) we haven't vetted; the <3.0.0 ceiling is deliberate,
|
|
# not an oversight. Revisit as a dedicated migration, not a dep bump.
|
|
- dependency-name: "pandas"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Frontend npm dependencies.
|
|
- package-ecosystem: "npm"
|
|
directory: "/frontend"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
|
|
# GitHub Actions workflow pins.
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|