Skip to content

build: remove the Dependabot ignore for which - #1202

Merged
juliasilge merged 1 commit into
mainfrom
build/remove-which-dependabot-ignore
Oct 15, 2026
Merged

juliasilge merged 1 commit into
mainfrom
build/remove-which-dependabot-ignore

Conversation

@juliasilge

Copy link
Copy Markdown
Collaborator

This PR removes the Dependabot ignore rule for which 7 and later from .github/dependabot.yml.

#1198 added this rule, because which 7 needs Node >=22.22, and the extension host in VS Code 1.101 uses an older Node.

#1199 removed which as a direct dependency. A local findOnPath helper in apps/vscode/src/core/python.ts now does the same work. As a result, the ignore rule has no function.

Other packages still bring in which 2 as a transitive dependency. This change does not affect it.

#1201 (the Dependabot bump of which from 3.0.1 to 6.0.1) is also obsolete after #1199, but thankfully Dependabot closed it.

@posit-snyk-bot

posit-snyk-bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@juliasilge
juliasilge merged commit eb8ab85 into main Oct 15, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants