From 068703d99dc8b4b68727216f06f8de35ad524bf7 Mon Sep 17 00:00:00 2001
From: Stefan Fleckenstein <stefan@fleckenstein.co.uk>
Date: Thu, 1 Oct 2026 14:44:14 +0100
Subject: [PATCH] chore: ignore major updates for vite

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 61ba09b9..8a098047 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,6 +13,13 @@ updates:
     labels:
       - dependencies
       - type/security
+    # Major upgrades of the build/test toolchain need a deliberate migration
+    # (peer dependencies of @sveltejs/vite-plugin-svelte), not a security PR.
+    ignore:
+      - dependency-name: vite
+        update-types: [version-update:semver-major]
+      - dependency-name: vitest
+        update-types: [version-update:semver-major]
     groups:
       dev-dependencies-security:
         applies-to: security-updates