Commit c1d2316
committed
docs(actions): drop the dependabot ignore advice for the v0 action tag
The note said dependabot reads `@v0` as the version `0` rather than as a
major-version pin, and told users to ignore `rvben/rumdl` in
`.github/dependabot.yml`. Both halves are wrong.
The downgrade PRs came from the default 3-day package cooldown GitHub enabled
for every ecosystem on 2026-07-14: dependabot works out that a moving major tag
is already current, then the cooldown filter discards that answer and re-picks
the newest tag older than the window. That is why the proposed version always
lagged the tag by a release or two, why it hit `v1`-style tags on other actions
too, and why it started on a date rather than always having been the case.
Fixed upstream on 2026-08-04 (dependabot/dependabot-core#15738).
The remedy was worse than the diagnosis: `ignore` by dependency-name is total,
so it also suppresses the eventual `v0` to `v1` migration, permanently, to work
around a bug that no longer exists.1 parent 47f8a50 commit c1d2316
2 files changed
Lines changed: 0 additions & 26 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
492 | 492 | | |
493 | 493 | | |
494 | 494 | | |
495 | | - | |
496 | | - | |
497 | | - | |
498 | | - | |
499 | | - | |
500 | | - | |
501 | | - | |
502 | | - | |
503 | | - | |
504 | | - | |
505 | | - | |
506 | | - | |
507 | | - | |
508 | 495 | | |
509 | 496 | | |
510 | 497 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
27 | | - | |
28 | | - | |
29 | | - | |
30 | | - | |
31 | | - | |
32 | | - | |
33 | | - | |
34 | | - | |
35 | | - | |
36 | | - | |
37 | | - | |
38 | | - | |
39 | | - | |
40 | 27 | | |
41 | 28 | | |
42 | 29 | | |
| |||
0 commit comments