Dependabot is currently not working

[hannobraun]

Rust 1.64.0 comes with support for a new Cargo feature: workspace inheritance. I started using this pretty much immediately (#1132), as it makes the version update that is part of the weekly release much easier, on top of consolidating a lot of redundant metadata.

Unfortunately, Dependabot doesn't support workspace inheritance yet: dependabot/dependabot-core#5315

This means, Dependabot no longer does anything for this repository. It just fails with an error every week. This is unfortunate, but right now I'm not considering rolling the change back. I think the benefits from workspace inheritance outweigh the benefits from Dependabot. I'm opening this issue to document and track the problem. Labeling as https://github.com/hannobraun/Fornjot/labels/status%3A%20blocked.

[poliorcetics]

I opened a PR for it dependabot/dependabot-core#5794, it should work but it's not merged yet.

It's probably possible to regenerate the docker container and use it locally to make the necessary changes but I have no idea how to do that

[hannobraun]

Thank you, @poliorcetics, that's awesome! Hope it gets merged soon!

It's probably possible to regenerate the docker container and use it locally to make the necessary changes but I have no idea how to do that

I have no idea either. I don't know anything about how Dependabot works, and not a lot about Docker either. For now, I'm happy to run cargo update manually every week or so.

[hannobraun]

Dependabot is active again. Thanks again, @poliorcetics!