Skip to content

fix: remove invalid security-updates group from dependabot#39

Merged
nullhack merged 1 commit intomainfrom
fix/dependabot-security-group
Apr 13, 2026
Merged

fix: remove invalid security-updates group from dependabot#39
nullhack merged 1 commit intomainfrom
fix/dependabot-security-group

Conversation

@nullhack
Copy link
Copy Markdown
Owner

Summary

  • Remove invalid security-updates group from dependabot configuration
  • The group used update-types: ["security"] which is not a valid value
  • Valid values are: major, minor, patch
  • Keep the valid dev-dependencies group for development tool updates

Changes

  • Removed invalid security-updates group (6 lines)
  • Updated comment to reflect actual behavior

Testing

  • YAML syntax validated
  • Only uses valid update-types values
  • Security updates will run individually (recommended approach)

Related

  • Fixes dependabot validation error
  • Resolves the 1 moderate vulnerability warning by allowing dependabot to work

The security-updates group used 'security' as an update-type which is
not a valid value according to GitHub's dependabot specification.
Valid values are: major, minor, patch.

This removes the invalid group configuration that was causing the
dependabot check to fail, while keeping the valid dev-dependencies
group for grouping development tool updates.
@nullhack nullhack merged commit e4963dd into main Apr 13, 2026
5 checks passed
@nullhack nullhack deleted the fix/dependabot-security-group branch April 13, 2026 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant