diff --git a/tests/pitfalls.test.ts b/tests/pitfalls.test.ts
index 52a5369..1d2ba3e 100644
--- a/tests/pitfalls.test.ts
+++ b/tests/pitfalls.test.ts
@@ -149,7 +149,10 @@ describe('dry runs show a plan, not a count', () => {
   });
 
   // TODO: remove each entry once its branch lands (the test fails on a stale entry).
-  const ALLOW: Record<string, string> = {};
+  const ALLOW: Record<string, string> = {
+    // the dry branch returns the .gitignore line it would add (the plan itself); the callers print it
+    'cli/lib/git-ignore.ts': 'returns the planned .gitignore line',
+  };
   test('no write command in cli/** leaves its --dry branch after printing only a count', () => {
     const root = join(import.meta.dir, '..');
     const flagged: string[] = [];