ci: revert importlib-metadata to 8.7.1 to fix Semgrep install

The Dependabot bump to 10.1.0 (#6059) conflicts with the pinned
opentelemetry-api 1.37.0 (importlib-metadata<8.8.0), so the Semgrep job
failed with ResolutionImpossible. Ignore importlib-metadata in Dependabot
since semgrep pins it indirectly.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>
This commit is contained in:
Niels Lohmann committed 2026-11-11 07:03:32 +01:00
1 parent 8d591bf720
commit ccb6c515d0
2 files changed
+4 -3

No files matched your search

+1
View File
@@ -67,3 +67,4 @@ updates:
- dependency-name: mcp
- dependency-name: boltons
- dependency-name: "opentelemetry-*"
- dependency-name: importlib-metadata