From 7266aa83e2b98d71e79b6c0da32de36d2a0d0814 Mon Sep 17 00:00:00 2001 From: Aleksei Bavshin Date: Mon, 13 Jan 2025 10:42:58 -0800 Subject: [PATCH] chore: update dependabot configuration - Check github-actions updates. - Configure dependabot to send a weekly batch of updates. - Restrict to a semver-compatible changes in the lockfile. - Work around the issue with the `examples` package. --- .github/dependabot.yml | 12 ++++++++++++ examples/Cargo.toml | 2 ++ 2 files changed, 14 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d5c3ffd..8f10246 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,7 +5,19 @@ version: 2 updates: + - package-ecosystem: "cargo" directory: "/" # Location of package manifests schedule: interval: "weekly" + groups: + all-dependencies: + patterns: + - "*" + # semver-incompatible updates will be handled manually + versioning-strategy: "lockfile-only" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" diff --git a/examples/Cargo.toml b/examples/Cargo.toml index 8f6f2c3..32d8bba 100644 --- a/examples/Cargo.toml +++ b/examples/Cargo.toml @@ -7,6 +7,8 @@ license.workspace = true homepage.workspace = true repository.workspace = true rust-version.workspace = true +# https://github.com/dependabot/dependabot-core/issues/1156 +autobins = false build = "../build.rs"