From 442699750f39749a05e902d92087e49fcdba9ade Mon Sep 17 00:00:00 2001
From: Joe Christensen <joechristensenwork@gmail.com>
Date: Thu, 29 Oct 2026 09:51:16 -0700
Subject: [PATCH 1/2] Revert "Bump @types/node from 22.20.5 to 26.6.5"

This reverts commit 1b31fca. The major bump was merged by accident;
dependency updates here take minor and patch versions only.
---
 package-lock.json | 16 ++++++++--------
 package.json      |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 35287bc..8b13766 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@opencode-ai/plugin": "^1.19.3"
       },
       "devDependencies": {
-        "@types/node": "^26.6.5",
+        "@types/node": "^22.10.0",
         "typescript": "^5.8.2",
         "vitest": "^3.2.4",
         "yaml": "^2.8.0"
@@ -996,13 +996,13 @@
       "license": "MIT"
     },
     "node_modules/@types/node": {
-      "version": "26.6.5",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.5.tgz",
-      "integrity": "sha512-uMzsv9stDdofIZBx4UGh4Z9ZgXnGC9seRDscilBcTHAeOFk67MZg/k9bWVfO+bk4qZmG+l52hRnLwUiH2LnJTg==",
+      "version": "22.20.5",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.5.tgz",
+      "integrity": "sha512-U2+DNr+wSjpsTS/wZGYHq7GcwfuSmKiKvoPvK22zwTlRhU91yOniN4qRR5KhIjvif7ysw/dz/hKmfDH0Ris4aA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~8.9.0"
+        "undici-types": "~6.21.0"
       }
     },
     "node_modules/@vitest/expect": {
@@ -1783,9 +1783,9 @@
       }
     },
     "node_modules/undici-types": {
-      "version": "8.9.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
-      "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
       "dev": true,
       "license": "MIT"
     },
diff --git a/package.json b/package.json
index 84ce6d2..a9d61b5 100644
--- a/package.json
+++ b/package.json
@@ -50,7 +50,7 @@
     "@opencode-ai/plugin": "^1.19.3"
   },
   "devDependencies": {
-    "@types/node": "^26.6.5",
+    "@types/node": "^22.10.0",
     "typescript": "^5.8.2",
     "vitest": "^3.2.4",
     "yaml": "^2.8.0"

From fe9ac7d5b90b16cfdb39002d4ddd478b53477f89 Mon Sep 17 00:00:00 2001
From: Joe Christensen <joechristensenwork@gmail.com>
Date: Thu, 29 Oct 2026 09:51:33 -0700
Subject: [PATCH 2/2] Limit Dependabot to minor and patch updates

Major upgrades are done by hand when they are wanted, so Dependabot
no longer opens PRs for them.
---
 .github/dependabot.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 515d903..278bbc0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,6 +9,10 @@ updates:
         update-types:
           - minor
           - patch
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - version-update:semver-major
   - package-ecosystem: github-actions
     directory: /
     schedule:
@@ -18,3 +22,7 @@ updates:
         update-types:
           - minor
           - patch
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - version-update:semver-major