From a47a938c7a66351d4c981aa337728835c05fb5d5 Mon Sep 17 00:00:00 2001
From: Alexander Schwartzman <alexander.schwartzman@scale.com>
Date: Wed, 14 Oct 2026 01:00:10 -0400
Subject: [PATCH] ci(dependabot): ignore mcp major updates and update the
 explorer UI's npm packages

---
 .github/dependabot.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c194fe49..099f79c2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,19 @@ updates:
     groups:
       python-minor-and-patch:
         update-types: ["minor", "patch"]
+    ignore:
+      # mcp 2 removed mcp.server.fastmcp, which env/gateway imports at module scope, and the dev
+      # extra's fastmcp needs mcp<2, so a major update can't resolve.
+      - dependency-name: "mcp"
+        update-types: ["version-update:semver-major"]
+  - package-ecosystem: "npm"
+    directory: "/src/agent_env/explorer/ui"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    groups:
+      npm-minor-and-patch:
+        update-types: ["minor", "patch"]
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: