From ae4cfa770c82e93b589eb422eb1f6d32142daf7e Mon Sep 17 00:00:00 2001 From: Implementer Date: Tue, 6 Oct 2026 10:37:08 +0200 Subject: [PATCH] Dependabot leaves the family's pins alone conventions v1.44.0 holds that no bot proposes a family pin, since the resync moves each with everything its move rewrites. This dependabot.yml ignores the ones it would watch: *robertblust/conventions*. Verified: conventions-check at v1.44.0 names no pin in this dependabot.yml. Process: Delivery Phase: Implement Track: Code Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f82d01e..f023fa5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,6 +13,9 @@ version: 2 updates: - package-ecosystem: "github-actions" directory: "/" + # Family pins move with the resync, never with Dependabot: conventions/PINS.md, Dependabot. + ignore: + - dependency-name: "*robertblust/conventions*" schedule: interval: "weekly" groups: