Skip to content

Commit 24dc8df

Browse files
committed
Enable Dependabot version updates for Rust
This enables grouped Dependabot version updates for Rust (`cargo`) dependencies. Previously, only GitHub Actions dependencies were updated with Dependabot in this repository; see ed59e97 (GitoxideLabs#43). The updates are grouped. So there is one one Dependabot version update PR for Rust dependencies per month, unless: - The Dependabot update check is manually triggered, *or* - `dependabot.yml` is changed (any change reruns update checks). Because Dependabot security updates are enabled, pull requests shall still be opened for those, immediately when an advisory enters the GHSA database, provided that Dependabot is actually able to create the update. (Dependabot security updates are separate from Dependabot version updates.)
1 parent 502682d commit 24dc8df

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

.github/dependabot.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
version: 2
22
updates:
3+
- package-ecosystem: cargo
4+
directory: '/'
5+
schedule:
6+
interval: monthly
7+
groups:
8+
cargo:
9+
patterns: ['*']
310
- package-ecosystem: github-actions
411
directory: '/'
512
schedule:

0 commit comments

Comments
 (0)