Ignore webpack-cli v4 from dependabot updates and keep v3.x

Viewed 63

Due to private packages, I am still using Dependabot v1. Below is my javascript (yarn) config.

version: 1
update_configs:
  - package_manager: 'javascript'
    directory: '/'
    update_schedule: 'daily'
    version_requirement_updates: increase_versions
    ignored_updates:
      - match:
          dependency_name: 'webpack-cli'
          version_requirement: '^3.3.12'

What I want?

I want to exclude/ignore webpack-cli 4.x. Whenever dependabot runs, webpack-cli updated to 4.x. It is incompatible with my app so i need at most v3.3.12. So, I told dependabot to ignore after ^3.3.12 but it still bumps and updates webpack-cli to v4.x

How can I make sure webpack-cli always stay at v3-series?

Expected

Dependabot ignore v4

Actual

It bumps my package.json and yarn.lock to v4.

0 Answers
Related