Skip to content

ci(deps): ignore symfony 8 until openemr moves#27

Merged
kojiromike merged 1 commit into
mainfrom
chore/dependabot-ignore-symfony-8
May 12, 2026
Merged

ci(deps): ignore symfony 8 until openemr moves#27
kojiromike merged 1 commit into
mainfrom
chore/dependabot-ignore-symfony-8

Conversation

@kojiromike
Copy link
Copy Markdown
Contributor

Summary

Add a Dependabot ignore rule for symfony/* >=8.0 in .github/dependabot.yml.

Why

OpenEMR currently pins symfony/* at ^7.3 in its root composer.json. When Dependabot bumps a module's symfony/* requirement to ^8.x, the module fails to install into a real OpenEMR site (composer cannot resolve). Better to suppress the noise of recurring Symfony 8 PRs until upstream openemr/openemr widens its constraint.

Remove the rule once upstream widens to ^7.0 || ^8.0 (or moves to ^8.0).

Test plan

  • yq . validates the YAML
  • Confirm Dependabot picks up the new ignore rule on next scan

OpenEMR currently pins symfony/* at ^7.3 in its root composer.json.
Bumping the module's symfony/* requirement to ^8.x makes the module
fail to install into a real OpenEMR site. Ignore Symfony >=8 in
Dependabot until upstream openemr/openemr widens its constraint.

Assisted-by: Claude Code
@kojiromike kojiromike added the dependencies Pull requests that update a dependency file label May 12, 2026
@kojiromike kojiromike merged commit 8f7b6c6 into main May 12, 2026
1 check passed
@kojiromike kojiromike deleted the chore/dependabot-ignore-symfony-8 branch May 12, 2026 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant