Skip to content

Conversation

@tidoust
Copy link
Member

@tidoust tidoust commented May 21, 2025

Removing the library from package.json is not enough for dependabot, it also needs to be removed from package-lock.json otherwise the bot just adds it back.

Edit: more accurately, I thought that was the case, but the library had not been removed from package.json in practice.

Removing the library from `package.json` is not enough for dependabot, it also
needs to be removed from `package-lock.json` otherwise the bot just adds it
back.
@tidoust tidoust merged commit bd43ff0 into main May 21, 2025
1 check passed
@tidoust tidoust deleted the drop-mocha branch May 21, 2025 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants