build(deps): ignore betterleaks >=1.6.0 until race is fixed

277a481→main·

gtrrz-victor·1w ago·1 file·+5 added/-0 removed

betterleaks 1.6.1 has a data race in internal/exprruntime on concurrent
DetectString (betterleaks/betterleaks#224). Prevent dependabot from
re-proposing the bump until upstream fixes it.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

Sessions

01KX3B806NHYGP6JK7EAD8PDPQView transcript

[?
Debug CI Failure and Fix Dependency RaceClaude Code·Opus 4.8[1m]·3 steps](/content/gh/entireio/cli/session/f0ed6007-c14a-4d17-be70-c8b85cc56229#timeline-01KX3B806NHYGP6JK7EAD8PDPQ/index.html)

Changes

1

• .github

• Mdependabot.yml+5

17 unmodified lines

18
19
20
21
22
23
24
25
26
27
28

17 unmodified lines

ignore:
      - dependency-name: "*"
        update-types: ["version-update:semver-major"]
      # betterleaks >=1.6.0 has a data race in internal/exprruntime
      # (concurrent DetectString), see betterleaks/betterleaks#224.
      # Pinned to 1.5.0 until fixed upstream.
      - dependency-name: "github.com/betterleaks/betterleaks"
        versions: [">=1.6.0"]

# Maintain dependencies for GitHub Actions
  - package-ecosystem: "github-actions"

M.github/dependabot.yml+5