From daec68469d7f8b85166356e5df8d863acfb66c27 Mon Sep 17 00:00:00 2001
From: mrholek <lukasz@holeczek.pl>
Date: Tue, 4 Aug 2026 11:49:22 +0200
Subject: [PATCH] chore(dependabot): automate only minors and patches

Majors are coordinated upgrades taken by hand: one unusable major (typescript 7,
blocked by typescript-eslint's peer range) otherwise holds a whole group PR hostage.
0.x packages get an explicit minor guard, since for them a minor is a breaking release.
---
 .github/dependabot.yml | 21 +++++++--------------
 1 file changed, 7 insertions(+), 14 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1699e73c..066e2b87 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -32,32 +32,25 @@ updates:
     versioning-strategy: increase
     rebase-strategy: disabled
     ignore:
-      # react/react-dom are pinned to 18.3.1 via package.json "overrides"
-      - dependency-name: "react"
+      # only minors and patches are automated; majors are coordinated upgrades taken
+      # by hand — a single unusable one (typescript 7, blocked by typescript-eslint's
+      # peer range) otherwise holds the whole group PR hostage
+      - dependency-name: "*"
         update-types:
           - "version-update:semver-major"
-      - dependency-name: "react-dom"
+      # 0.x packages — a minor release is a breaking release
+      - dependency-name: "@coreui/astro-docs*"
         update-types:
-          - "version-update:semver-major"
-      # docs engine — Astro majors are coordinated migrations, bumped by hand
-      - dependency-name: "astro"
-        update-types:
-          - "version-update:semver-major"
-      - dependency-name: "@astrojs/*"
-        update-types:
-          - "version-update:semver-major"
+          - "version-update:semver-minor"
       # linter churn — new rules break CI; bump deliberately
       - dependency-name: "eslint*"
         update-types:
-          - "version-update:semver-major"
           - "version-update:semver-minor"
       - dependency-name: "typescript-eslint"
         update-types:
-          - "version-update:semver-major"
           - "version-update:semver-minor"
       - dependency-name: "@typescript-eslint/*"
         update-types:
-          - "version-update:semver-major"
           - "version-update:semver-minor"
     groups:
       production-dependencies: