From 4006e24c5ab53874d720a9d6ac592f2194ab594f Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 21:05:31 +0000 Subject: [PATCH 1/2] fix: update launchdarkly-js-sdk-common to 5.8.3 and add dependency cooldown --- .github/dependabot.yml | 28 ++++++++++++++++++++++++++++ package.json | 2 +- 2 files changed, 29 insertions(+), 1 deletion(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..1932898 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,28 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + # Dependency quarantine: only adopt releases that are at least 7 days old. + cooldown: + default-days: 7 + # Restrict version updates to the current major version. Security updates are + # exempt (update-types does not affect security updates), so Dependabot may + # still bump a major version when required to resolve a vulnerability. + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "daily" + # Dependency quarantine: only adopt releases that are at least 7 days old. + cooldown: + default-days: 7 + # Restrict version updates to the current major version. Security updates are + # exempt (update-types does not affect security updates), so Dependabot may + # still bump a major version when required to resolve a vulnerability. + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] diff --git a/package.json b/package.json index 5d041f0..c205d49 100644 --- a/package.json +++ b/package.json @@ -66,7 +66,7 @@ }, "dependencies": { "launchdarkly-eventsource": "2.0.3", - "launchdarkly-js-sdk-common": "5.8.2", + "launchdarkly-js-sdk-common": "5.8.3", "node-localstorage": "^1.3.1" }, "repository": { From ff0ecf85bba77df699a62612a407780178956c94 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 21:33:34 +0000 Subject: [PATCH 2/2] chore: remove dependabot cooldown config --- .github/dependabot.yml | 28 ---------------------------- 1 file changed, 28 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 1932898..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,28 +0,0 @@ -version: 2 -updates: - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "daily" - # Dependency quarantine: only adopt releases that are at least 7 days old. - cooldown: - default-days: 7 - # Restrict version updates to the current major version. Security updates are - # exempt (update-types does not affect security updates), so Dependabot may - # still bump a major version when required to resolve a vulnerability. - ignore: - - dependency-name: "*" - update-types: ["version-update:semver-major"] - - package-ecosystem: "npm" - directory: "/" - schedule: - interval: "daily" - # Dependency quarantine: only adopt releases that are at least 7 days old. - cooldown: - default-days: 7 - # Restrict version updates to the current major version. Security updates are - # exempt (update-types does not affect security updates), so Dependabot may - # still bump a major version when required to resolve a vulnerability. - ignore: - - dependency-name: "*" - update-types: ["version-update:semver-major"]