From 90a82fb02918db394e6c394442f7e80bb876c2a8 Mon Sep 17 00:00:00 2001 From: Brad DerManouelian Date: Tue, 8 Sep 2026 00:26:54 -0500 Subject: [PATCH] chore(dependabot): hold the conventionalcommits preset at 9.x MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #616 pinned conventional-changelog-conventionalcommits to ^9.3.1 to unbreak the release pipeline, and Dependabot immediately proposed ^10.4.0 again in the next dev-dependencies group (#620). Merging that would restore the exact failure #616 fixed: the 10.x line requires conventional-changelog-writer@9, semantic-release 25 bundles a generator depending on writer ^8, and generateNotes dies before any release is cut. The hold was missing from the batch added in #617 — an oversight, since #616 had pinned it minutes earlier. --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 64e4877eb..faa13e2b8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -28,6 +28,15 @@ updates: update-types: ["version-update:semver-major"] - dependency-name: "bullmq" update-types: ["version-update:semver-major"] + # Pinned to 9.x on purpose (#616). The 10.x line requires + # conventional-changelog-writer@9, but semantic-release 25 bundles + # @semantic-release/release-notes-generator 14, which depends on writer + # ^8 — the two cannot agree, and generateNotes dies with + # `Missing helper: ... requires conventional-changelog-writer@9 or newer`, + # blocking every app release. Only unhold this alongside a + # semantic-release major that ships a writer-9 generator. + - dependency-name: "conventional-changelog-conventionalcommits" + update-types: ["version-update:semver-major"] groups: dev-dependencies: dependency-type: "development"