Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
deps: avoid updates of indirect (transitive) deps
Problem: Dependabot is updating transitive deps (`package-lock.json`) instead of only dependencies that we explicitly declare (`package.json`). Examples: #670 #669 Solution: Revert `dependency-name: '*'`, which was only an experiment. The remove of `dependency-type: 'development'` in 15dfb02 should be enough to fix the problem of missing Dependabot updates, without also inviting updates of transitive deps. See also aws/aws-toolkit-vscode@f102e96
- Loading branch information