From e199aff6c3cff46083e9ede39d7d664beb3a5971 Mon Sep 17 00:00:00 2001 From: LingMan Date: Wed, 17 Aug 2022 17:58:29 +0200 Subject: [PATCH] Add a dependabot config Dependabot will automatically file PRs for updatable dependencies. The `cargo` section watches Cargo.toml. Patch releases are ignored since those are semver compatible and cargo downloads the latest anyway. The `github-actions` section watches the workflow files in .github/workflows for possible updates to any of the Actions depended upon. --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..e091fa0 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,13 @@ +version: 2 +updates: + - package-ecosystem: "cargo" + directory: "/" + schedule: + interval: "weekly" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-patch"] + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly"