Hold TypeScript 7, Tailwind majors and @types/node 25+ in Dependabot

[OjasMor]

Summary

The weekly npm-major Dependabot group (#87, now #89) fails npm ci before any job runs: TypeScript 7.0.2 is outside typescript-eslint's peer range (>=4.8.4 <6.1.0). That one failure hides the other majors in the group from CI, so none of them can be judged or merged.

• typescript >= 6.1.0 held until typescript-eslint supports TS 7 — COD-2262.
• tailwindcss semver-major held: packages/web is on Tailwind 3 and moving to 4 is a config migration — COD-2263. packages/docs is already on 4, so this holds only major jumps and its 4.x updates keep flowing.
• @types/node >= 25.0.0 held: types track the Node runtime in .nvmrc (24).

With these, Dependabot re-opens the group with the remaining majors (globals, lint-staged, jsdom, vitest, eslint-plugin-react-hooks, workers-types, yaml), which CI can then actually test. No runtime change.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Automated dependency update checks now skip TypeScript versions 6.1.0 and later, Tailwind CSS major-version updates, and @types/node versions 25.0.0 and later. This limits proposed updates for these packages.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 6c11f2cd-c20c-4d9e-ad8b-7703225bb828

📥 Commits

Reviewing files that changed from the base of the PR and between 8a31dca and 3612ec1.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: This review used your included allowance. 2 included reviews remain after this review. Your included PR review attempts over the past 7 days set your current allowance at 4 reviews per hour. Your free on-demand review promotion remains active until October 9, 2026 at 6:00 PM UTC.

---

📝 Walkthrough

Walkthrough

The npm Dependabot configuration adds ignore rules for selected TypeScript and @types/node versions, and for Tailwind CSS major-version updates.

Changes

npm update constraints

Layer / File(s)	Summary
npm package ignore rules .github/dependabot.yml	Dependabot ignores TypeScript versions >= 6.1.0, Tailwind CSS major-version updates, and @types/node versions >= 25.0.0.

Priority: ➖ Normal

Merge Risk: ⚪ Minimal · up to 3612e

The Tailwind update rule preserves minor and patch updates for packages/docs. No material merge-blocking risk is identified; normal checks can proceed.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the three Dependabot version holds: TypeScript 7, Tailwind major updates, and @types/node 25+.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[codos-reviewer]

Blocking: 0 · Non-blocking: 0

The npm ignore rules match the declared TypeScript, Tailwind, and Node types versions. The TypeScript and Node types bounds leave compatible updates eligible, and the Tailwind major-only rule leaves docs' 4.x updates eligible. No issues found. This is configuration-only; Dependabot's next run will verify the resulting group.