From cb395836a96167f467eaeea713adf1541dc3619a Mon Sep 17 00:00:00 2001 From: "Michael A. Smith" Date: Mon, 28 Sep 2026 08:47:11 -0400 Subject: [PATCH] ci(dependabot): stop proposing openCoreEMR/actionlint bumps The fork carries upstream tags alongside our -oce.N releases. Semver ranks v1.7.12 above v1.7.12-oce.1, so Dependabot proposes swapping the patched build for the upstream one, which rejects the client-id input on actions/create-github-app-token@v3 and fails lint. Bump the fork by hand until rhysd/actionlint#668 lands. Assisted-by: Claude Code --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 49378ae..75294c3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,11 @@ updates: directory: / schedule: interval: daily + ignore: + # Bump the fork by hand. Its plain vX.Y.Z tags mirror upstream, which + # semver ranks above vX.Y.Z-oce.N, so Dependabot proposes dropping our patches. + # Drop this when rhysd/actionlint#668 lands and we return to upstream. + - dependency-name: openCoreEMR/actionlint labels: - dependencies - github-actions