Merge pull request #55 from eunomie/dependabot-graphql-core-3-3

sdk: keep Dependabot off graphql-core 3.3

Author: eunomie

.dagger/modules/engine-e2e/main.dang

@@ -37,8 +37,12 @@ type EngineE2e {
       .withExec(["git", "init", "--quiet"])
   }
 
+  """
+  Without ripgrep, the CLI searches a workspace with GNU grep flags, which
+  BusyBox grep rejects.
+  """
   let clientBase: Container! {
-    container.from("alpine:3.22").withExec(["apk", "add", "--no-cache", "git"])
+    container.from("alpine:3.22").withExec(["apk", "add", "--no-cache", "git", "ripgrep"])
   }
 
   """

.github/dependabot.yml

@@ -17,3 +17,7 @@ updates:
     groups:
       sdk:
         patterns: ["*"]
+    ignore:
+      # graphql-core 3.3 breaks the code generator, so sdk/codegen keeps it below 3.3.
+      - dependency-name: graphql-core
+        versions: [">=3.3"]