From 5c6744675e698b6f0141594c9a278937105bf775 Mon Sep 17 00:00:00 2001 From: Abel Date: Sat, 10 Oct 2026 12:46:51 +0100 Subject: [PATCH 1/2] Keep Executor framework updates bound to its host version --- .github/dependabot.yml | 5 +++++ docs/INTEGRATIONS.md | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0109ee2..88b51dc 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,6 +22,11 @@ updates: - package-ecosystem: "npm" directory: "/integrations/executor" + # Executor chooses its exact framework version. npm's stable apps package + # is unrelated; update this dependency manually against the target host. + ignore: + - dependency-name: "apps" + versions: ["*"] schedule: interval: "weekly" labels: ["dependencies"] diff --git a/docs/INTEGRATIONS.md b/docs/INTEGRATIONS.md index 6399cd3..c069d9d 100644 --- a/docs/INTEGRATIONS.md +++ b/docs/INTEGRATIONS.md @@ -51,7 +51,7 @@ The source in [integrations/executor](../integrations/executor) is a portable ap The app uses `never()` for reads and `always()` for its two writes. The host requires approval bound to the exact tool and arguments; `confirm:true` alone cannot bypass it. Requests use a fixed API origin and manual redirect handling, rejecting 3xx responses. Appending tags preserves existing names, with the same concurrent-edit limitations as any read-then-write operation. -The adapter is checked against `apps@0.0.1-beta.74`. Executor requires the **target host's exact framework version**, not `apps@latest`: +The adapter is checked against `apps@0.0.1-beta.74`. Dependabot excludes `apps` because the target host controls that version; the stable package on npm is unrelated to this framework. Executor requires the **target host's exact framework version**, not `apps@latest`: ```sh executor apps framework From 2abe29a13b53f3a7402ca9bc866d8165f55caa60 Mon Sep 17 00:00:00 2001 From: Abel Date: Sat, 10 Oct 2026 12:48:12 +0100 Subject: [PATCH 2/2] Ignore every automated framework version update --- .github/dependabot.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 88b51dc..af94caa 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -26,7 +26,6 @@ updates: # is unrelated; update this dependency manually against the target host. ignore: - dependency-name: "apps" - versions: ["*"] schedule: interval: "weekly" labels: ["dependencies"]