Skip to content

chore(dependabot): 暂停普通版本升级,保留安全检查 - #222

Merged
yourtion merged 2 commits into
mainfrom
chore/dependabot-version-updates
Oct 27, 2026
Merged

yourtion merged 2 commits into
mainfrom
chore/dependabot-version-updates

Conversation

@yourtion

Copy link
Copy Markdown
Owner

为现有 GitHub Actions、根 npm、examples npm 三项配置各增加 open-pull-requests-limit: 0,暂停新建普通版本升级 PR,并补充简短维护说明。

此选项只限制普通版本更新。安全更新 PR 使用独立限制,见 GitHub 官方配置说明。

保留 schedules 和 CodeQL 工作流,不修改仓库安全设置,不关闭已有依赖 PR。安全更新及漏洞告警由仓库后台设置控制。

验证:

  • PyYAML 解析及与 main 的语义对比:仅三项 limit 新增整数 0,其他字段相同。
  • CodeQL 工作流与 main 字节完全一致。
  • pnpm run check、git diff --check 和 18 个本地文档链接/锚点检查通过。

基于 v3.3.1 发布后的 main 独立创建。草稿,供审阅,未设置自动合并。

@codecov

codecov Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.61%. Comparing base (54f6eea) to head (82a7685).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #222   +/-   ##
=======================================
  Coverage   99.61%   99.61%           
=======================================
  Files          29       29           
  Lines        3150     3150           
  Branches     1025     1025           
=======================================
  Hits         3138     3138           
  Misses         12       12           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@yourtion
yourtion marked this pull request as ready for review October 27, 2026 08:31
@yourtion
yourtion merged commit 8a80d32 into main Oct 27, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant