Niels Lohmann 8c0b48088c ci: ignore Dependabot bumps of packages pinned by semgrep (#6062) ...

semgrep requires exact or compatible-release versions of mcp, boltons and
the opentelemetry packages. Bumping them alone makes the Semgrep job fail
at pip install (see #6054, #6055, #6057, #6058, #6060, #6061), so leave
them to move with the semgrep bump.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-11-10 21:45:05 +01:00

..

external_ci

Split the Visual Studio 2019 AppVeyor job into two shards (#5872)

2026-10-21 16:25:04 +02:00

ISSUE_TEMPLATE

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

workflows

build(deps): bump the codeql-action group with 3 updates (#6056)

2026-11-10 21:44:46 +01:00

CODE_OF_CONDUCT.md

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

CODEOWNERS

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

config.yml

Overwork project infrastructure (#5218)

2026-06-30 18:09:06 +02:00

CONTRIBUTING.md

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

dependabot.yml

ci: ignore Dependabot bumps of packages pinned by semgrep (#6062)

2026-11-10 21:45:05 +01:00

FUNDING.yml

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

labeler.yml

Compare json_view with yyjson, simdjson, and Boost.JSON (#5627)

2026-10-22 08:40:33 +02:00

PULL_REQUEST_TEMPLATE.md

Check the fuzzers' UBJSON/BJData round-trip invariants in the unit tests (#5569)

2026-09-25 08:29:02 +02:00

SECURITY.md

Document response times, supported versions, access, secrets, and dependency policies (#5580)

2026-09-25 20:34:58 +02:00