Skip to content

Commit 2e2f477

Browse files
authored
chore(deps): disable dependabot from updating pyside6-essentials (#507)
PySide6-Essentials is pinned to 6.8.3 in the gui extra to align with VFX Reference Platform 2026, so Dependabot bumps for it are never actionable and just need closing by hand (e.g. #503, which proposed 6.8.3 -> 6.11.1). Mirrors the ignore rule already present in aws-deadline/deadline-cloud, but as a bare dependency-name. deadline-cloud uses versions: ["6"], which pip parses as the exact requirement '= 6' and so only ignores 6.0 -- it would not have suppressed the 6.11.1 bump. Omitting both versions and update-types resolves to ALL_VERSIONS (">= 0") in dependabot-core, which ignores every update for the dependency. The glob also guards against the manifest's mixed casing (PySide6-Essentials) and any sibling pyside6-* package. Signed-off-by: Stephen Crowe <6042774+crowecawcaw@users.noreply.github.com>
1 parent 3929ccc commit 2e2f477

1 file changed

Lines changed: 7 additions & 1 deletion

File tree

.github/dependabot.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,13 @@ updates:
99
directory: "/" # Location of package manifests
1010
schedule:
1111
interval: "daily"
12-
commit-message:
12+
# PySide6 is pinned to 6.8 to align with VFX Reference Platform 2026, so
13+
# Dependabot must not propose bumps for it: https://vfxplatform.com/#reference-platform
14+
# Omitting `versions` and `update-types` ignores every update for the
15+
# dependency, which is what we want here.
16+
ignore:
17+
- dependency-name: "pyside6*"
18+
commit-message:
1319
prefix: "chore(deps):"
1420
# Combine all minor and patch bumps into a single PR. Major bumps do not
1521
# match this group and so each get their own individual PR.

0 commit comments

Comments
 (0)