Make Dependabot bumps mergeable without loosening the pins from #24 - #72

Merged

mvaneijken merged 6 commits into

mainfrom

bugfix/dependabot-lock-sync

Aug 31, 2026

Commits on Aug 31, 2026

Make Dependabot bumps mergeable without loosening the pins from #24
mvaneijken
committed
108cffe
Address review feedback and harden the sweep
mvaneijken
committed
c37a0aa
Read the ignore list whatever its YAML quoting, and reuse the manifest cache
mvaneijken
committed
1392885
Assert the ignore rules, not the quotes around them
mvaneijken
committed
d897f5a
Remove ignore rules by rule, not by their quoting, in the sandbox tests
mvaneijken
committed
daee00b
Refuse an SBOM that mirrors one lock artefact twice
mvaneijken
committed
0ee9c5e