dependabot / dependabot/dependabot-core
Allow ignoring dependency in group where major version is zero
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
Often times we make use of dependencies which are still in the 'initial development' stage, [section 4 of the semver spec](https://semver.org/#spec-item-4) specifies that these should be given a major version of zero (i.e. `0.y.z`). As such packages are allowed to break their public API at any point it would be useful to be able to filter these out of groups. E.g.:
```yaml
- package-ecosystem: caargo
groups:
minor:
update-types:
- minor
- patch
exclude-update-types:
- initial-development
```
Contributor guide
Research direction
Start by tracing how groups handle update-types and exclude-update-types for the cargo package ecosystem, using the YAML example and SemVer section 4 as the behavioral reference. Check existing group and update-type tests, then verify that an initial-development option can exclude updates for 0.y.z dependencies without changing other update categories.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby, rust
- Domain
- devtools
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100