Skip to content

Freeze dependencies, disable dependabot#324

Merged
pepelsbey merged 1 commit into
mainfrom
freeze-deps
Jun 24, 2026
Merged

Freeze dependencies, disable dependabot#324
pepelsbey merged 1 commit into
mainfrom
freeze-deps

Conversation

@pepelsbey

Copy link
Copy Markdown
Member

Description

  • Freezes dependencies ^5.1.6 > 5.1.6
  • Remove .github/dependabot.yml

Since this demo is not maintained and soon to be retired.

@pepelsbey pepelsbey requested review from a team and mdn-bot as code owners June 24, 2026 14:47
@pepelsbey pepelsbey requested a review from dipikabh June 24, 2026 14:47

@dipikabh dipikabh left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

Comment thread .github/dependabot.yml
Comment on lines -4 to -9
- package-ecosystem: npm
directory: "/"
schedule:
interval: daily
open-pull-requests-limit: 3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it have been sufficient to remove just the npm dependabot?
In any case, it might not matter since we'll be retiring this repo soon

@dipikabh

Copy link
Copy Markdown

Actually, looking at https://github.com/mdn/content/pull/44198/changes and the https://github.com/orgs/mdn/discussions/827, React is not included in the "to be retired list".

But pinning the versions and removing the npm dependabot still apply 👍

@pepelsbey pepelsbey merged commit 5ea61e3 into main Jun 24, 2026
4 checks passed
@pepelsbey pepelsbey deleted the freeze-deps branch June 24, 2026 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants