jj/.github/dependabot.yml

version: 2
updates:
- package-ecosystem: "cargo"
  directory: "/"
  schedule:
    interval: "daily"
  open-pull-requests-limit: 10
  commit-message:
    prefix: "cargo:"
  groups:
    cargo-dependencies:
      patterns:
      - "*"
- package-ecosystem: "github-actions"
  directory: "/"
  schedule:
    interval: "daily"
  open-pull-requests-limit: 10
  commit-message:
    prefix: "github:"
  groups:
    github-dependencies:
      patterns:
      - "*"
github: add a dependabot config This was another security recommendation for projects by Google employees. 2022-03-17 03:44:00 +00:00			`version: 2`
			`updates:`
			`- package-ecosystem: "cargo"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`open-pull-requests-limit: 10`
			`commit-message:`
			`prefix: "cargo:"`
github: reenable grouped cargo updates The dependabot refused to update some dependencies anyway. Maybe it conservatively checks if all intra dependencies meet a certain version? ``` updater \| 2023/12/15 15:56:45 INFO <job_762807265> No update possible for cargo_metadata 0.17.0 updater \| 2023/12/15 15:56:54 INFO <job_762807265> No update possible for crossterm 0.26.1 updater \| 2023/12/15 15:57:04 INFO <job_762807265> No update possible for itertools 0.11.0 updater \| 2023/12/15 15:57:16 INFO <job_762807265> No update possible for zstd 0.12.4 updater \| 2023/12/15 15:57:16 INFO <job_762807265> No update possible for jj-cli 0.12.0 updater \| 2023/12/15 15:57:27 INFO <job_762807265> No update possible for toml_edit 0.19.15 updater \| 2023/12/15 15:57:38 INFO <job_762807265> No update possible for prost-build 0.11.9 updater \| 2023/12/15 15:57:49 INFO <job_762807265> No update possible for prost 0.11.9 ``` backout of commit 58744d95739224a616a4a38828486a17f8986de1 2023-12-16 02:57:42 +00:00			`groups:`
			`cargo-dependencies:`
			`patterns:`
			`- "*"`
github: add a dependabot config This was another security recommendation for projects by Google employees. 2022-03-17 03:44:00 +00:00			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`open-pull-requests-limit: 10`
			`commit-message:`
			`prefix: "github:"`
github: tell Dependabot to group all deps when possible This should reduce the number of PRs to review, and the number of uninteresting commits in the repo history. 2023-07-05 15:14:08 +00:00			`groups:`
dependabot: also group cargo updates It looks like I accidentally applied the grouping only to GitHub actions updates. 2023-07-07 14:49:50 +00:00			`github-dependencies:`
github: tell Dependabot to group all deps when possible This should reduce the number of PRs to review, and the number of uninteresting commits in the repo history. 2023-07-05 15:14:08 +00:00			`patterns:`
			`- "*"`