From 4e588ffa1d94750e7e8fe0385f89bc571f161531 Mon Sep 17 00:00:00 2001 From: Zyy <39424122+zyycn@users.noreply.github.com> Date: Mon, 14 Sep 2026 11:01:34 +0800 Subject: [PATCH] chore(deps): ignore Codex-aligned dependencies (#84) Co-authored-by: Zyy Co-authored-by: Codex --- .github/dependabot.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0efdb3a4b..4185e6ea7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,11 +21,20 @@ updates: day: monday time: '09:10' timezone: Asia/Shanghai - # 固定官方 Codex Desktop 的 TLS 指纹;升级前必须抓取握手并比对扩展顺序。 + # 按官方 Codex 锁文件、协议指纹或已审计 fork 固定;完成对应核对与实测后再手动升级。 ignore: + - dependency-name: aws-lc-rs + - dependency-name: hyper - dependency-name: hyper-rustls - dependency-name: reqwest - dependency-name: rustls + - dependency-name: rustls-native-certs + - dependency-name: rustls-pki-types + - dependency-name: tokio + - dependency-name: tokio-rustls + - dependency-name: tokio-tungstenite + - dependency-name: tungstenite + - dependency-name: zstd groups: minor-and-patch: update-types: