ef304d5573Dependabot's npm updater fetches manifests directly from git and aborts on every run because package.json declares "@pulumi/googleworkspace": "file:sdks/googleworkspace" while sdks/ is gitignored and only materialized by `pulumi install`. Keep the generated SDK sources ignored, but commit sdks/googleworkspace/package.json (name/version/dependencies matching the existing package-lock.json entry) so the path dependency resolves from the git tree. `pulumi install` removes and regenerates the whole SDK directory before npm ci in CI, so CI behavior is unchanged. Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Den Delimarsky <53200638+localden@users.noreply.github.com>
21 lines
438 B
Text
21 lines
438 B
Text
node_modules/
|
|
bin/
|
|
*.log
|
|
.devenv/
|
|
.devenv.flake.nix
|
|
devenv.lock
|
|
|
|
# Pulumi
|
|
.pulumi/
|
|
Pulumi.*.yaml.bak
|
|
# Generated SDKs stay ignored, but keep the stub manifest so Dependabot can
|
|
# resolve the file: dependency (nested negations are required: git cannot
|
|
# re-include a file whose parent directory is excluded)
|
|
sdks/*
|
|
!sdks/googleworkspace/
|
|
sdks/googleworkspace/*
|
|
!sdks/googleworkspace/package.json
|
|
|
|
# Secrets
|
|
passphrase.prod.txt
|
|
sa-key.json
|