Skip to content

ci(dependabot): ignore major versions of numpy, opencv and zarr - #157

Merged
dustenhubbard merged 1 commit into
mainfrom
ci/dependabot-ignore-majors
Oct 7, 2026
Merged

dustenhubbard merged 1 commit into
mainfrom
ci/dependabot-ignore-majors

Conversation

@dustenhubbard

Copy link
Copy Markdown
Member

Major versions of numpy, zarr and both opencv-python packages break the current stack, and each open major-bump pull request holds one of the five slots in open-pull-requests-limit indefinitely. On Sep 1 those five slots were full, which suppressed the numpy update that was needed. This ignores semver-major updates for the four, so they are raised by editing the pin instead.

Closes #156.

Major versions of these four packages break the current stack. numpy 2.x fails
at import under opencv-python 4.8, and zarr 3 and opencv 5 change their APIs.
Left unignored, each one holds a slot in open-pull-requests-limit indefinitely,
and on 2026-09-01 the five open major bumps filled every slot, which suppressed
the numpy update that was needed.

These four are raised by editing the pin, not by Dependabot.
@dustenhubbard dustenhubbard added the reviewed A human authorized this merge (vcs-guard Gate 1 evidence) label Oct 7, 2026
@dustenhubbard
dustenhubbard merged commit 7425697 into main Oct 7, 2026
6 checks passed
@dustenhubbard
dustenhubbard deleted the ci/dependabot-ignore-majors branch October 7, 2026 00:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

reviewed A human authorized this merge (vcs-guard Gate 1 evidence)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Open major-bump pull requests fill the Dependabot limit and block other updates

1 participant