From d5dc04984a57c2838c68e1de6d61082bb62fe4fc Mon Sep 17 00:00:00 2001
From: razbroc <razbroc@gmail.com>
Date: Thu, 27 Aug 2026 09:27:43 +0300
Subject: [PATCH] chore: stop dependabot reopening majors blocked by peer deps

express 5 and typescript 7 both fail npm ci with ERESOLVE before any job
runs, so dependabot reopens an unmergeable PR every week.

express 5 is gated on @map-colonies/openapi-express-types@0.2.0, whose
only published version peers @types/express@^4.17.21. typescript 7 is
gated on openapi-typescript, which peers typescript@^5.x.

Ignore the majors on both until the shared packages move.
---
 .github/dependabot.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index bfad5a3..dace8be 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -8,6 +8,12 @@ updates:
       interval: weekly
     allow:
       - dependency-type: production
+    ignore:
+      # express 5 needs @map-colonies/openapi-express-types to publish an
+      # express-5 peer range first; until then npm ci fails with ERESOLVE.
+      - dependency-name: 'express'
+        update-types:
+          - version-update:semver-major
     directory: /
     commit-message:
       prefix: 'deps'
@@ -27,6 +33,16 @@ updates:
       interval: weekly
     allow:
       - dependency-type: development
+    ignore:
+      # Paired with the express major above.
+      - dependency-name: '@types/express'
+        update-types:
+          - version-update:semver-major
+      # TypeScript 7 is the Go rewrite; the shared MapColonies configs and
+      # openapi-typescript (peer typescript@^5.x) have to move first.
+      - dependency-name: 'typescript'
+        update-types:
+          - version-update:semver-major
     directory: /
     commit-message:
       prefix: 'devdeps'