ci: revert importlib-metadata to 8.7.1 to fix Semgrep install (#6064)

The Dependabot bump to 10.1.0 (#6059) conflicts with the pinned
opentelemetry-api 1.37.0 (importlib-metadata<8.8.0), so the Semgrep job
failed with ResolutionImpossible. Ignore importlib-metadata in Dependabot
since semgrep pins it indirectly.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>
This commit is contained in:
Niels Lohmann authored and GitHub committed 2026-11-11 09:18:40 +01:00
1 parent 8d591bf720
commit 017a3ce001
2 files changed
+4 -3

No files matched your search

+1
View File
@@ -67,3 +67,4 @@ updates:
- dependency-name: mcp
- dependency-name: boltons
- dependency-name: "opentelemetry-*"
- dependency-name: importlib-metadata