From 7a2935cf9e3922e90e4ed5f3556b1cb107013148 Mon Sep 17 00:00:00 2001 From: "Dylan M. Taylor" Date: Sun, 18 Oct 2026 15:10:55 -0400 Subject: [PATCH] ci: configure Dependabot for Cargo and GitHub Actions (#2460) Configures Dependabot to keep Rust / Cargo dependencies and GitHub Actions workflows up to date. - Schedules daily dependency checks at 06:00 America/New_York - Groups Cargo updates into a single consolidated PR with `chore(deps)` prefix - Groups GitHub Actions updates into a single consolidated PR with `ci(deps)` prefix --- .github/dependabot.yml | 35 +++++++++++++++++++++++++++-------- 1 file changed, 27 insertions(+), 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e8d486ab3f..2c4b8cb1a4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,11 +1,30 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates - version: 2 updates: - - package-ecosystem: "cargo" # See documentation for possible values - directory: "/" # Location of package manifests + # Maintain Rust / Cargo dependencies + - package-ecosystem: "cargo" + directory: "/" schedule: - interval: "weekly" + interval: "daily" + time: "06:00" + timezone: "America/New_York" + # Consolidate updates into a single PR rather than one PR per crate + groups: + cargo-dependencies: + patterns: + - "*" + commit-message: + prefix: "chore(deps)" + + # Maintain GitHub Actions workflows + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + time: "06:00" + timezone: "America/New_York" + groups: + actions: + patterns: + - "*" + commit-message: + prefix: "ci(deps)"