dependabot / fetch-metadata

Extract information about the dependencies being updated by a Dependabot-generated PR.
MIT License
170 stars 61 forks source link

Relax `engine-strict=true` #510

Closed jeffwidman closed 5 months ago

jeffwidman commented 5 months ago

Looking at git history, this was added in https://github.com/dependabot/fetch-metadata/pull/251 and was probably an overzealous add TBH.

I often like pinning, but here it's breaking our :dependabot: runs:

So let's relax it for now. If we later run into problems, we can always tighten the screws later.

Fix: