Tor Browser Integration: Dependency Update Rules
Dropping wasm for Tor browser integration is being discussed here: tor-browser#43096
Trying to pull the lox crates into Tor browser directly has revealed some [dependency conflicts](tpo/applications/tor-browser#43096 (comment 3129660)) and vetting issues that should be resolved. Currently renovate bot attempts to update all dependencies as soon as they are released. This will mostly be a problem for lox-library
and lox-utils
since the integration with Tor browser may cause conflicts with mozilla's dependencies. However, it may be worth re-considering how aggressively we want to update dependencies in general and the conditions under which we should be notified of updates from renovate bot and whether those can be automated/set in the renovate.json
file. As a start, we can set renovate.json to ignore the dependencies specifically tagged in !283