mirror of
https://github.com/dependabot/fetch-metadata.git
synced 2026-03-12 18:07:12 -04:00
We'd rather suggest folks pin to the floating tag `v1` so they default to automatically updated. If they'd rather pin deterministically, they should be pinning by SHA, not the full major/min/patch. Related: * https://github.com/dependabot/fetch-metadata/pull/246 * https://github.com/dependabot/fetch-metadata/pull/267#discussion_r983986989