fix: pin axios to 1.6.x and prevent dependabot from overwriting the p…

…ackage manifest (#2257)
contentful · Jun 13, 2024 · e750d1d · e750d1d
1 parent fb01fe6
commit e750d1d
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 8 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,6 +6,7 @@ registries:
     token: ${{secrets.NPM_REGISTRY_REGISTRY_GH_ORG_TOKEN}}
 updates:
   - package-ecosystem: npm
+    versioning-strategy: lockfile-only
     registries:
       - npm-github
     directory: "/"

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -77,7 +77,7 @@
   "dependencies": {
     "@contentful/content-source-maps": "^0.6.0",
     "@contentful/rich-text-types": "^16.0.2",
-    "axios": "~1.7.2",
+    "axios": "~1.6.8",
     "contentful-resolve-response": "^1.8.1",
     "contentful-sdk-core": "^8.1.0",
     "json-stringify-safe": "^5.0.1",