From 4ba25c422451e44251656975aeed0ea9d784fd7d Mon Sep 17 00:00:00 2001 From: Steven Lambert <2433219+straker@users.noreply.github.com> Date: Thu, 16 May 2024 08:50:07 -0600 Subject: [PATCH 1/3] chore: ignore colorjs.io updates from dependabot --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b7ba1c567c..1c9896058a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -36,6 +36,10 @@ updates: # @see https://github.com/dequelabs/axe-core/issues/3771 - dependency-name: 'esbuild' versions: ['>=0.11.0'] + # Prevent colorjs.io issue caused by v0.5.0+ + # @see https://github.com/dequelabs/axe-core/issues/4428 + - dependency-name: 'colorjs.io' + version: ['>=0.5.0'] groups: # Any updates not caught by the group config will get individual PRs npm-low-risk: From dbccafbfbe8cb0f680ca3b71cf64e6afb9a21304 Mon Sep 17 00:00:00 2001 From: Steven Lambert <2433219+straker@users.noreply.github.com> Date: Thu, 16 May 2024 09:00:59 -0600 Subject: [PATCH 2/3] Update .github/dependabot.yml Co-authored-by: Dan Bjorge --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1c9896058a..c2a273b66d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -36,10 +36,10 @@ updates: # @see https://github.com/dequelabs/axe-core/issues/3771 - dependency-name: 'esbuild' versions: ['>=0.11.0'] - # Prevent colorjs.io issue caused by v0.5.0+ + # Prevent colorjs.io issue caused by >v0.4.3 # @see https://github.com/dequelabs/axe-core/issues/4428 - dependency-name: 'colorjs.io' - version: ['>=0.5.0'] + version: ['>0.4.3'] groups: # Any updates not caught by the group config will get individual PRs npm-low-risk: From 07d92ce379a7928e3f6dbc65627417e50883bbb2 Mon Sep 17 00:00:00 2001 From: Steven Lambert <2433219+straker@users.noreply.github.com> Date: Thu, 16 May 2024 15:24:18 -0600 Subject: [PATCH 3/3] Update .github/dependabot.yml Co-authored-by: Dan Bjorge --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c2a273b66d..20a8df72bf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -39,7 +39,7 @@ updates: # Prevent colorjs.io issue caused by >v0.4.3 # @see https://github.com/dequelabs/axe-core/issues/4428 - dependency-name: 'colorjs.io' - version: ['>0.4.3'] + versions: ['>0.4.3'] groups: # Any updates not caught by the group config will get individual PRs npm-low-risk: