From 30aeb77f519c5638c2eef359dea6bd5f90efa323 Mon Sep 17 00:00:00 2001 From: Brandon McAnsh Date: Thu, 20 Aug 2026 10:00:42 -0400 Subject: [PATCH] build(deps): hold libphonenumber 9.0.37 until the Android port catches up --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 85b6b2bf5..d7394f85a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,6 +12,16 @@ updates: libphonenumber: patterns: - "*libphonenumber*" + ignore: + # Google's libphonenumber can only move when the Android port (io.michaelrocks) has a matching + # release — the two ship separate copies of the metadata and must stay on the same version, or + # they can disagree on whether a number is valid. See the note in gradle/libs.versions.toml. + # The port has no 9.0.37, so this specific version is held. Grouping alone does not prevent it: + # a group PR still gets opened with just the one artifact when only that artifact has an update, + # and closing such a PR does NOT suppress the version (Dependabot says so explicitly on close). + # Remove this entry once the port publishes 9.0.37 or later. + - dependency-name: "com.googlecode.libphonenumber:libphonenumber" + versions: ["9.0.37"] labels: - "dependencies" - "type: build"