Skip to content

Dependabot: ignore major @types/node bumps - #223

Open
a-akimov wants to merge 2 commits into
modelcontextprotocol:mainfrom
a-akimov:chore/dependabot-node-versions
Open

a-akimov wants to merge 2 commits into
modelcontextprotocol:mainfrom
a-akimov:chore/dependabot-node-versions

Conversation

@a-akimov

Copy link
Copy Markdown
Contributor

Motivation and Context

Dependabot was suggesting to upgrade from Node 24 to Node 26, but this is a bigger change and should be done only when we decide to bump the major version across all our TS examples. So, better to explicitely disable this for now.

How Has This Been Tested?

Locally

Breaking Changes

No

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist

  • I have read the MCP Documentation
  • My code follows the repository's style guidelines
  • New and existing tests pass locally
  • I have added appropriate error handling
  • I have added or updated documentation as needed

Additional context

Assisted with Claude Code.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The ignore rule is valid and fulfills the stated goal; only minor comment wording is inaccurate.

Review effort: Balanced
Findings: 1 Low severity

Open (1)
What changed in this PR

Adds a Dependabot rule preventing automatic major upgrades of Node type definitions.

Changes:

  • Ignores semver-major updates for @types/node.
  • Documents manual major-version updates.
File Description
.github/​dependabot.yml Configures the npm Dependabot update policy.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/dependabot.yml Outdated
@a-akimov a-akimov changed the title Dependabot - Ignore major Node versions Dependabot: ignore major @types/node bumps Sep 29, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The configuration is valid and the Node.js engine metadata is consistent across TypeScript projects.

Review effort: Balanced
Findings: None

Resolved since last review (1)
Files not reviewed (1)
  • tests/helpers/package-lock.json: Generated file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants