# Dependabot configuration
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Keep SHA-pinned GitHub Actions fresh. Dependabot updates the pinned
# commit SHA and the trailing version comment together.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
# Rust dependency updates, grouped into a single weekly PR to keep noise low.
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "weekly"
groups:
cargo-dependencies:
patterns:
- "*"
ignore:
# criterion 0.8+ declares rust-version 1.86, above our MSRV (1.85).
# Remove this ignore when the MSRV is raised (see docs/IMPROVEMENT_PLAN.md).
- dependency-name: "criterion"
versions: