From a1d4912c6680a6241668edb7e56a35856dd9d793 Mon Sep 17 00:00:00 2001 From: Jesse Katsumata Date: Sun, 15 Nov 2026 14:12:53 +0900 Subject: [PATCH] chore: group release-it with its changelog plugin in dependabot release-it and @release-it/conventional-changelog are coupled through a peer range: the plugin declares `release-it: ^18 || ^19 || ^20`, so bumping release-it alone to 21 produces a combination the plugin refuses. This is not hypothetical. #1245 bumps release-it 18.1.2 -> 21.1.2 on its own and cannot be merged for exactly this reason, and nothing in CI catches it: yarn treats the peer mismatch as a warning, and no CI job runs the release path, so the failure would only surface on a real publish. Grouping them means dependabot offers the pair together, at versions that satisfy each other. No exclude-patterns needed -- `release-it` and `@release-it/conventional-changelog` are the only dependencies either pattern can match, so the group is identical under either reading of non-wildcard pattern matching. Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a133c835..a9c859ce 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -33,3 +33,17 @@ updates: - "@rnx-kit/*" - "@types/react-native" - "@callstack/react-native-visionos" + # release-it and its changelog plugin are coupled through a peer range: the + # plugin declares `release-it: ^18 || ^19 || ^20`, so a release-it 21 bump + # on its own leaves a combination the plugin refuses. That is not + # hypothetical -- it is why #1245 could not be merged. yarn treats the peer + # mismatch as a warning and CI never runs the release path, so nothing + # catches it until a publish actually fails. + # + # No exclude-patterns here: `release-it` and `@release-it/conventional-changelog` + # are the only matching dependencies, so the group is the same under either + # reading of non-wildcard pattern matching. + release-it: + patterns: + - release-it + - "@release-it/*"