Commit 24dc8df
committed
Enable Dependabot version updates for Rust
This enables grouped Dependabot version updates for Rust (`cargo`)
dependencies. Previously, only GitHub Actions dependencies were
updated with Dependabot in this repository; see ed59e97 (GitoxideLabs#43).
The updates are grouped. So there is one one Dependabot version
update PR for Rust dependencies per month, unless:
- The Dependabot update check is manually triggered, *or*
- `dependabot.yml` is changed (any change reruns update checks).
Because Dependabot security updates are enabled, pull requests
shall still be opened for those, immediately when an advisory
enters the GHSA database, provided that Dependabot is actually able
to create the update. (Dependabot security updates are separate
from Dependabot version updates.)1 parent 502682d commit 24dc8df
1 file changed
+7
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
3 | 10 | | |
4 | 11 | | |
5 | 12 | | |
| |||
0 commit comments