dependabot / dependabot/dependabot-core

Allow ignoring dependency in group where major version is zero

Open
#8,685 6 comments 7 reactions 0 assignees View on GitHub
T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

Often times we make use of dependencies which are still in the 'initial development' stage, [section 4 of the semver spec](https://semver.org/#spec-item-4) specifies that these should be given a major version of zero (i.e. `0.y.z`). As such packages are allowed to break their public API at any point it would be useful to be able to filter these out of groups. E.g.:

```yaml
- package-ecosystem: caargo
groups:
minor:
update-types:
- minor
- patch
exclude-update-types:
- initial-development
```

Contributor guide

Open the contributing guide

Research direction

Start by tracing how groups handle update-types and exclude-update-types for the cargo package ecosystem, using the YAML example and SemVer section 4 as the behavioral reference. Check existing group and update-type tests, then verify that an initial-development option can exclude updates for 0.y.z dependencies without changing other update categories.

Written by the indexing model from the issue text.

Assessment

Tech stack
ruby, rust
Domain
devtools
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.