version: 2
updates:
# Keep Cargo dependencies current. Note: keyhop ships Windows-only binaries,
# so transitive deps that are gated by `[target.'cfg(windows)'.dependencies]`
# never compile into the shipped artifact even if Dependabot lists alerts
# against their Linux-only sub-crates (e.g. glib via libappindicator).
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "weekly"
open-pull-requests-limit: 5
labels:
- "dependencies"
- "rust"
# Keep GitHub Actions on supported Node.js runtimes.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
open-pull-requests-limit: 5
labels:
- "dependencies"
- "ci"