dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.63k stars 993 forks source link

For a given package, `ignore` versions by regex #3746

Open blommish opened 3 years ago

blommish commented 3 years ago

When there is a new update for kotlinx-coroutines-core we always get a update for the *-native-mt version but we want the "normal" version, ex 1.5.0 instead of 1.5.0-native-mt. How would that be possible?

version: 2

updates:
- package-ecosystem: maven
  directory: "/"
  schedule:
    interval: weekly
    day: "sunday"
    time: "04:00"
  open-pull-requests-limit: 10
  ignore:
  - dependency-name: org.jetbrains.kotlinx:kotlinx-coroutines-core
    versions:
    - "*-native-mt"
asciimike commented 3 years ago

There is no way we currently provide to ignore arbitrarily named versions, though thanks for the potential syntax changes.