Hold linters and @plotly majors in Dependabot

.github/dependabot.yml

@@ -217,6 +217,14 @@ updates:
         patterns:
           - "*"
     ignore:
+      # Majors across these build helpers and fixtures (eslint 10, prettier 3,
+      # webpack-cli 7, react-jsx-parser 2, ...) break the build or the pinned
+      # eslint 8 / prettier 2 toolchain. Take minors and patches only.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+      # dash-jupyterlab supports JupyterLab 2, 3 and 4 via a wide range;
+      # Dependabot narrows it to the latest 4.x and the lockfile bump breaks tsc.
+      - dependency-name: "@jupyterlab/*"
       # react-docgen is pinned for legacy metadata extraction (extract-meta.js uses
       # the react-docgen 5 API) and must never be updated.
       - dependency-name: "react-docgen"
@@ -260,15 +268,14 @@ updates:
     # jupyterlab is pinned <4.0.0: jupyterlab 4.x ships jlpm as Yarn Berry, which
     # cannot consume @plotly/dash-jupyterlab's Yarn 1 lockfile and breaks the build.
     #
-    # black >=25.12.0 and pylint >=4.0.0 require Python >=3.10 and cannot install
-    # on the 3.9 CI jobs (Dash still supports Python 3.9). Upgrading either past
-    # its last 3.9-compatible release (black 25.11.0, pylint 3.3.9) also forces a
-    # repo-wide reformat / lint-fix pass, so linter bumps are done deliberately,
-    # not via Dependabot.
+    # Linters are held entirely. black >=25.12.0, pylint >=4.0.0 and flake8
+    # >=7.4.0 require Python >=3.10 and cannot install on the 3.9 CI jobs (Dash
+    # still supports Python 3.9). Even the last 3.9-compatible black / pylint
+    # force a repo-wide reformat / lint-fix pass, so linter bumps are done
+    # deliberately, not via Dependabot.
     ignore:
       - dependency-name: "jupyterlab"
         versions: [">=4.0.0"]
       - dependency-name: "black"
-        versions: [">=25.12.0"]
       - dependency-name: "pylint"
-        versions: [">=4.0.0"]
+      - dependency-name: "flake8"

requirements/testing.txt

@@ -5,7 +5,7 @@ lxml>=4.6.2
 percy-python-selenium>=1.0.0
 pytest>=6.0.2
 requests[security]>=2.21.0
-selenium>=4.11.0,<=4.50.0
+selenium>=4.11.0,<=4.51.0
 waitress>=1.4.4
 multiprocess>=0.70.12
 psutil>=5.8.0