From fc5f73ccd60c2b9f5662ea45929b68955a1a903c Mon Sep 17 00:00:00 2001
From: pmaxhogan <max@maxhogan.dev>
Date: Tue, 18 Aug 2026 14:21:07 -0500
Subject: [PATCH] ci(deps): ignore the regressed keyring 4.1.6 in dependabot

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019xKUm9vH4ifb5LHR5szy1v
---
 .github/dependabot.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2d0279d4..0ec4b96f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,6 +20,14 @@ updates:
     commit-message:
       prefix: "build(deps)"
       prefix-development: "build(deps-dev)"
+    ignore:
+      # keyring 4.1.6 regressed: it caches the first native-store failure
+      # forever, defeating the in-memory test-store latch and panicking
+      # the_test_suite_is_isolated_from_the_os_keychain on headless CI
+      # (no Secret Service). Pinned back in #298; drop this ignore once a
+      # release fixes the LazyLock latch upstream.
+      - dependency-name: keyring
+        versions: ["4.1.6"]
     groups:
       cargo-minor-patch:
         update-types: