From d3dd8781a8e3786ad1f19fde0e423f62618615da Mon Sep 17 00:00:00 2001
From: Kagami Sascha Rosylight <saschanaz@outlook.com>
Date: Fri, 2 Jul 2021 21:09:29 +0200
Subject: [PATCH] Update package-lock.json only

---
 .github/dependabot.yml                 | 6 ++----
 .github/workflows/update-core-deps.yml | 2 ++
 package-lock.json                      | 8 ++++----
 package.json                           | 8 ++++----
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 39b6076a2..df68c0122 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,7 +10,5 @@ updates:
     # Check the npm registry for updates every month
     schedule:
       interval: "monthly"
-    # Bump versions in package.json
-    # https://github.com/dependabot/dependabot-core/issues/3103
-    # https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#versioning-strategy
-    versioning-strategy: "increase"
+    # Bump versions only in package-lock.json
+    versioning-strategy: "lockfile-only"
diff --git a/.github/workflows/update-core-deps.yml b/.github/workflows/update-core-deps.yml
index d7faf2053..692565397 100644
--- a/.github/workflows/update-core-deps.yml
+++ b/.github/workflows/update-core-deps.yml
@@ -16,9 +16,11 @@ jobs:
         with:
           node-version: '15'
 
+      # Use ncu to detect major version changes
       - run: npm i -g npm-check-updates
       - run: ncu -u
       - run: npm i
+      - run: git restore package.json
       - run: npm run build && npm run baseline-accept
       - id: git-diff
         run: git diff --quiet HEAD baselines
diff --git a/package-lock.json b/package-lock.json
index 66535ca9b..001c1a33c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,16 +9,16 @@
       "version": "0.0.1",
       "license": "Apache-2.0",
       "devDependencies": {
-        "@mdn/browser-compat-data": "3.3.9",
+        "@mdn/browser-compat-data": "^3.3.9",
         "@types/jsdom": "^16.2.12",
         "@types/node": "^15.12.5",
         "@types/node-fetch": "^2.5.10",
         "@types/webidl2": "^23.13.5",
         "@typescript-eslint/eslint-plugin": "^4.28.1",
         "@typescript-eslint/parser": "^4.28.1",
-        "@webref/css": "2.0.2",
-        "@webref/elements": "1.0.1",
-        "@webref/idl": "2.2.6",
+        "@webref/css": "^2.0.2",
+        "@webref/elements": "^1.0.1",
+        "@webref/idl": "^2.2.6",
         "cpx2": "^3.0.0",
         "danger": "^10.6.6",
         "eslint": "^7.29.0",
diff --git a/package.json b/package.json
index 09c8b5628..100405a65 100644
--- a/package.json
+++ b/package.json
@@ -38,16 +38,16 @@
   "license": "Apache-2.0",
   "type": "module",
   "devDependencies": {
-    "@mdn/browser-compat-data": "3.3.9",
+    "@mdn/browser-compat-data": "^3.3.9",
     "@types/jsdom": "^16.2.12",
     "@types/node": "^15.12.5",
     "@types/node-fetch": "^2.5.10",
     "@types/webidl2": "^23.13.5",
     "@typescript-eslint/eslint-plugin": "^4.28.1",
     "@typescript-eslint/parser": "^4.28.1",
-    "@webref/css": "2.0.2",
-    "@webref/elements": "1.0.1",
-    "@webref/idl": "2.2.6",
+    "@webref/css": "^2.0.2",
+    "@webref/elements": "^1.0.1",
+    "@webref/idl": "^2.2.6",
     "cpx2": "^3.0.0",
     "danger": "^10.6.6",
     "eslint": "^7.29.0",