Merge pull request #755 from camunda/deps/pin-orchestration-cluster-api-8x

deps: pin @camunda8/orchestration-cluster-api to 8.x range

Author: jwulf

.github/dependabot.yml

@@ -9,6 +9,13 @@ updates:
       npm-dependencies:
         patterns:
           - "*"
+    ignore:
+      # Pin @camunda8/orchestration-cluster-api to the 8.x release range.
+      # The 9.x line will target Camunda 9 and is not API-compatible with
+      # this SDK's 8.x stable lines. Major bumps must be done manually as
+      # part of a `server-major` release (see release.config.js).
+      - dependency-name: "@camunda8/orchestration-cluster-api"
+        update-types: ["version-update:semver-major"]
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
@@ -27,6 +34,10 @@ updates:
       npm-dependencies:
         patterns:
           - "*"
+    ignore:
+      # See note on main: pin to 8.x on stable/8.8 as well.
+      - dependency-name: "@camunda8/orchestration-cluster-api"
+        update-types: ["version-update:semver-major"]
   - package-ecosystem: github-actions
     directory: "/"
     schedule:

package-lock.json

@@ -127,7 +127,7 @@
 		"win-ca": "3.5.1"
 	},
 	"dependencies": {
-		"@camunda8/orchestration-cluster-api": "^8.8.4",
+		"@camunda8/orchestration-cluster-api": ">=8.8.4 <9.0.0",
 		"@grpc/grpc-js": "^1.14.3",
 		"@grpc/proto-loader": "^0.8.0",
 		"@types/form-data": "^2.2.1",