i don't know why dependabot keeps insisting i should upgrade to a dependency that causes CI to break, but cool
Conversation
Replying to
You can ask it to stop on the pull request:
docs.github.com/en/code-securi
It expects you to deal with the breaking changes or get the upstream bugs in that project fixed otherwise.
docs.github.com/en/code-securi has the list of commands you can give via pull request. Relevant ones:
ignore this dependency
ignore this major version
ignore this minor version
1

