From 4f63d7c8439abbd424b21b6d4b9e735e3c81d742 Mon Sep 17 00:00:00 2001 From: emeraldleaf Date: Sun, 31 May 2026 19:03:55 -0600 Subject: [PATCH] chore(deps): ignore WolverineFx major-version bumps in Dependabot MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Wolverine 6.0 (PR #34) split the runtime code generator into a separate WolverineFx.RuntimeCompilation package (GH-2876). Every integration test in PR #34 failed at host startup with "no IAssemblyGenerator (Roslyn) is registered" — a major-version migration, not a Dependabot pickup. Stay on 5.x until the project does a dedicated 6.0 migration PR (read release notes end-to-end, choose dynamic-compilation package vs. TypeLoadMode.Static + codegen-write CI step, verify saga + outbox + AddConcurrencyRetry paths). Dependabot will continue suggesting 5.x minor/patch bumps via the existing wolverine group. Adding majors to ignore is the pattern for any package whose major versions ship known migration surface area; add others as they break the build under a Dependabot rebase. Co-Authored-By: Claude Opus 4.7 --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c9d94c07..413cc9a7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -43,6 +43,21 @@ updates: - "AwesomeAssertions" - "NSubstitute" - "Bogus" + # Major-version bumps for packages with known migration surface area are + # deferred — Dependabot shouldn't open a weekly PR that breaks every + # integration test until someone has time to read the release notes, + # restructure code, and verify the saga + outbox + concurrency-retry + # paths still behave. Add majors back to the ignore list as they ship + # breaking changes; remove when a dedicated migration PR has landed. + ignore: + # Wolverine 6.0 split the runtime code generator into a separate + # WolverineFx.RuntimeCompilation package (GH-2876). Every integration + # test fails at host startup with "no IAssemblyGenerator registered" + # until production code either references the new package or pre- + # generates code via `dotnet run -- codegen write` + TypeLoadMode.Static. + # Stay on 5.x (Dependabot will still bump 5.x patches/minors). + - dependency-name: "WolverineFx*" + update-types: ["version-update:semver-major"] - package-ecosystem: github-actions directory: /