From ca1f515ff68d66fa9d182be0671a127e5aaeb7e8 Mon Sep 17 00:00:00 2001
From: Arnout Engelen <arnout@bzzt.net>
Date: Mon, 6 Oct 2025 16:28:50 +0200
Subject: [PATCH] gateway: ignore cpp-linter 2.16 dependabot updates

Guessing the syntax since
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/controlling-dependencies-updated
doesn't appear to document the GitHub Actions case...
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8bce7aec..a198ef91 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -26,4 +26,10 @@ updates:
       - "/stash/save"
     schedule:
       interval: "daily"
+    ignore:
+      # post-2.16 versions depend on hustcer/setup-nu which
+      # we're not comfortable trusting fully yet. See also
+      # https://github.com/apache/infrastructure-actions/issues/324
+      - dependency-name: "cpp-linter/cpp-linter-action"
+        versions: ">=2.16"
     open-pull-requests-limit: 50