From c9f14c1f91cbd83ce49fec93d7f150f52fb213bc Mon Sep 17 00:00:00 2001 From: Adib Hanna Date: Fri, 28 Aug 2026 12:34:03 -0500 Subject: [PATCH] chore(dependabot): keep katex inside app-core's ^0.16 range MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit katex is a 0.x package, so Dependabot's first regenerated group (#37) bumped it 0.16.15 -> 0.18.4 as a 'minor' — outside the ^0.16.15 range the pinned app-core declares. Ignore minors as well as majors; patches still flow. --- .github/dependabot.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 55cf524..8a76171 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,8 +21,10 @@ updates: # the pin's versions too; majors are never a drive-by. - dependency-name: "@codemirror/*" update-types: ["version-update:semver-major"] + # katex is 0.x: a "minor" bump (0.16 -> 0.18) leaves the ^0.16 range the + # pinned app-core declares, so only patches may move on their own. - dependency-name: katex - update-types: ["version-update:semver-major"] + update-types: ["version-update:semver-major", "version-update:semver-minor"] - dependency-name: mermaid update-types: ["version-update:semver-major"] - dependency-name: jsxgraph