From 39be07ebd66c85434d48bd1b441ff6ed062ef4a1 Mon Sep 17 00:00:00 2001
From: Nikolay Miroshnichenko <nickol@me.com>
Date: Sat, 12 Sep 2026 21:40:53 +0200
Subject: [PATCH] ci: keep Dependabot off mcp major bumps until the v2 port

mcp 2.x drops mcp.server.fastmcp; the import fails outright on 2.2.0, which is
what Dependabot's first PR would have allowed. Minor and patch updates still flow.
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 90e5f68..0534d55 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,6 +10,12 @@ updates:
     groups:
       python-deps:
         patterns: ["*"]
+    ignore:
+      # mcp 2.x removed mcp.server.fastmcp (FastMCP -> MCPServer). Verified against
+      # mcp 2.2.0: the import raises ModuleNotFoundError. Major bumps stay out until
+      # the server is ported; minor and patch updates still come through.
+      - dependency-name: mcp
+        update-types: ["version-update:semver-major"]
     commit-message:
       prefix: deps