From 872bd5fb063ac5c763c2d060c0f9e45ff746974a Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Sun, 11 Oct 2026 15:13:09 +0000
Subject: [PATCH] chore(dependabot): ignore unpatchable braces, node-forge,
 sprintf-js

Chief approved residual ignores for packages with no patched npm release.
open-pull-requests-limit: 0 keeps version-update spam off while security
ignores still apply. Revisit when upstream publishes patches.

Co-Authored-By: Cursor <noreply@cursor.com>

Co-authored-by: Gaffer.dev <drferdiiskandar@sentrahai.com>
---
 .github/dependabot.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..db11120
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 0
+    ignore:
+      # Unpatchable on npm (Chief approved 2026-10-11). Revisit when patched releases publish.
+      - dependency-name: braces
+      - dependency-name: node-forge
+      - dependency-name: sprintf-js
+