Skip to content

chore(dependabot): Add basic Dependabot config #1283

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
szokeasaurusrex wants to merge 1 commit into
base: master
Choose a base branch
from
+19 −0
Open

chore(dependabot): Add basic Dependabot config #1283

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
version: 2
# Keep Cargo.lock current so CI runs against the latest compatible dependency
# versions. This does not affect dependency resolution for library users and can
# reduce stale-dependency RUSTSEC alerts. Major updates are separate PRs because
# they may be breaking for users and are treated primarily as upgrade notices.
updates:
- package-ecosystem: cargo
directory: "/"
schedule:
interval: weekly
# Avoid changing Cargo.toml when the existing requirement allows the update.
versioning-strategy: increase-if-necessary

@cursor cursor Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cargo may reject this versioning strategy value

Medium Severity

Dependabot's schema validation for the cargo ecosystem has historically accepted only auto and lockfile-only for versioning-strategy, rejecting increase-if-necessary. A rejected value invalidates the whole file, so no update PRs are opened at all rather than just ignoring the option. Worth confirming the value validates before merging.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 2c80129. Configure here.

groups:
non-major:
patterns:
- "*"
update-types:
- minor
- patch
Loading