Skip to content

chore(deps): 見送り major を Dependabot で ignore 設定#62

Merged
YasunoriMATSUOKA merged 1 commit into
mainfrom
chore/dependabot-triage
Jun 8, 2026
Merged

chore(deps): 見送り major を Dependabot で ignore 設定#62
YasunoriMATSUOKA merged 1 commit into
mainfrom
chore/dependabot-triage

Conversation

@YasunoriMATSUOKA

@YasunoriMATSUOKA YasunoriMATSUOKA commented Jun 8, 2026

Copy link
Copy Markdown
Member

概要

Dependabot が作成した 15 件の major PR をトリアージし、今回見送る major の再提案を抑制します。

変更

.github/dependabot.yml の root / functions エントリに ignore(semver-major)を追加:

  • root: react / react-dom / @types/react(-dom)(React 19 移行が必要)、typescript(TS6)、eslint(flat config)、daisyui + tailwindcss(daisyUI5 は Tailwind4 必須)
  • functions: typescript、eslint、symbol-sdk(v3 暗号破壊変更)、@types/node(Node22 ランタイムに整合)

採用予定の firebase-functions / @hookform/resolvers / @fortawesome/*ignore しません(別 PR で最新 major へ更新)。

関連クローズ

本対応に伴い以下の Dependabot PR を理由付きで close: #45, #46, #47, #49, #54, #55, #58, #59, #60

準備が整った時点で該当 ignore を外して採用します。

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated dependency management configuration to defer major version upgrades for selected core and development dependencies.

Stop Dependabot from re-proposing major upgrades that need scoped migration
work before they can land. Remove an entry when ready to adopt that major.

root: react/react-dom/@types/react(-dom) (React 19 migration), typescript
(TS 6) and eslint (flat config), daisyui + tailwindcss (daisyUI 5 needs
Tailwind 4).
functions: typescript, eslint, symbol-sdk (v3 crypto rewrite), and @types/node
(kept aligned with the Node 22 deploy runtime).

firebase-functions, @hookform/resolvers and @fortawesome/* are intentionally
NOT ignored — they are being upgraded to their latest majors now.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings June 8, 2026 15:23
@coderabbitai

coderabbitai Bot commented Jun 8, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 564815e4-0e55-45d2-82fa-d0a8b6cfb7f1

📥 Commits

Reviewing files that changed from the base of the PR and between ebacc48 and bd6dca0.

📒 Files selected for processing (1)
  • .github/dependabot.yml

📝 Walkthrough

Walkthrough

This PR adds ignore blocks to .github/dependabot.yml to defer semver-major dependency upgrades in two npm ecosystems: the root package set defers React, ReactDOM, TypeScript, ESLint, daisyUI, and Tailwind CSS; the Cloud Functions package set defers TypeScript, ESLint, symbol-sdk, and @types/node.

Changes

Dependabot Major Version Deferral Configuration

Layer / File(s) Summary
Root ecosystem major version deferral
.github/dependabot.yml
Root npm ecosystem configured to defer major upgrades for React, ReactDOM, @types packages, TypeScript, ESLint, daisyUI, and Tailwind CSS with inline comments.
Cloud Functions ecosystem major version deferral
.github/dependabot.yml
Functions npm ecosystem configured to defer major upgrades for TypeScript, ESLint, symbol-sdk, and @types/node aligned with Node 22 deployment runtime.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A dependabot dance so light and neat,
Major versions paused, not yet complete,
React and TypeScript hold their ground,
While symbol-sdk's major waits around,
Careful caution keeps the code sweet! 🌱

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title references deferring major versions in Dependabot, which directly relates to the PR's primary change of adding ignore entries for major dependency upgrades in .github/dependabot.yml.
Linked Issues check ✅ Passed The PR adds ignore configuration for daisyui major upgrades (#45) as intended, deferring the daisyui v5 migration that requires Tailwind CSS v4, aligning with the linked issue's requirements.
Out of Scope Changes check ✅ Passed All changes are scoped to .github/dependabot.yml configuration for managing major dependency upgrades, with no unrelated modifications present.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/dependabot-triage

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s Dependabot configuration to suppress re-opening major-version upgrade PRs that have been intentionally deferred, reducing noise until the corresponding migrations are planned.

Changes:

  • Add ignore rules for major updates in the root npm ecosystem (React 19, TS 6, ESLint 10, daisyUI 5 / Tailwind 4).
  • Add ignore rules for major updates in the /functions npm ecosystem (TS 6, ESLint 10, symbol-sdk v3, @types/node major).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@YasunoriMATSUOKA YasunoriMATSUOKA merged commit ea30d94 into main Jun 8, 2026
7 checks passed
@YasunoriMATSUOKA YasunoriMATSUOKA deleted the chore/dependabot-triage branch June 8, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants