From c43cf1503bccbf948033b88c95792c3bae99131b Mon Sep 17 00:00:00 2001
From: Damien Retzinger <damienwebdev@gmail.com>
Date: Tue, 9 Jun 2026 17:40:41 -0400
Subject: [PATCH] ci: prevent dependabot from bumping placeholder packages

---
 .github/dependabot.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d0babeb..456ebed 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,4 +8,11 @@ updates:
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
-      interval: "weekly"
\ No newline at end of file
+      interval: "weekly"
+    # TS subpackages pin deps to 0.0.0-PLACEHOLDER; real versions are managed
+    # in the root package.json Keep Dependabot out of them so it stops 
+    # "bumping" the placeholder (see PR #267).
+    exclude-paths:
+      - "resolve-check-config/**"
+      - "setup-install/**"
+      - "supported-version/**"
\ No newline at end of file