release: estende ignore django para minor (LTS = sprint-level)#30
Merged
Conversation
…t-level) PR #28 do Dependabot propos django 5.1.4 -> 5.2.14 e foi classificado como minor (semver), entrando no group python-non-major com CI verde. Mas 5.1 -> 5.2 e a transicao LTS-para-LTS em Django, que o item B16 do Improvement-system.md marca como decisao sprint-level: exige validacao manual alem do CI (settings deprecadas, middlewares customizados, auth backend, testes E2E reais). Antes deste fix, o ignore cobria so 'version-update:semver-major' (django 5.x -> 6.x). Agora cobre minor tambem, evitando que upgrades LTS escapem como minor inocente. Patches (5.1.5, 5.1.6, ...) continuam abertos — eles trazem fixes de CVE que importam para producao. Quando subir django em Sprint dedicada, remover este ignore inteiro (volta a aceitar minor + major). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GabeMarques-Intetsu
force-pushed
the
develop
branch
from
afb4fb4 to
924af7a
Compare
7 tasks
GabeMarques-Intetsu
added a commit
that referenced
this pull request
Jun 6, 2026
Trazendo o commit 38ce337 (chore(deps): estende ignore de django para minor, PR #30) que vivia em main mas faltava em develop. Sem isso, futuras feature branches saindo de develop nascem 1 commit atras do main em config dependabot. PR #37 ja estava CLEAN/MERGEABLE; merge eh housekeeping, nao destrava. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Hotfix de governança do Dependabot, motivado pelo PR #28 que apareceu enquanto fechávamos a release anterior (#29).
O problema
Dependabot abriu PR #28 propondo `django 5.1.4 → 5.2.14` no group `python-non-major` (classificado como minor pelo semver). CI verde, MERGEABLE. Mas em Django, 5.1 → 5.2 é a transição LTS-para-LTS que o item B16 do `Improvement-system.md` marca explicitamente como sprint-level (testar middlewares custom, settings deprecadas, auth backend).
Fix
Estende o `ignore` do django no `dependabot.yml` para incluir `semver-minor` (antes era só `semver-major`). Patches continuam fluindo (5.1.5, 5.1.6, ...) — eles trazem CVE fixes.
Quando reverter
Quando subir django em Sprint dedicada: remover este ignore inteiro do dependabot.yml.
Test plan
🤖 Generated with Claude Code