metamorphic-log 0.1.2

Tamper-evident, append-only transparency log + verification SDK for the Metamorphic platform: RFC 6962/9162 Merkle proofs, C2SP tlog-tiles substrate, witnessed checkpoints, hybrid post-quantum checkpoint signing, and CONIKS-style index privacy. Single source of truth for primitives is metamorphic-crypto.
Documentation
version: 2
updates:
  # Keep SHA-pinned GitHub Actions current. Dependabot opens PRs that bump
  # both the pinned commit SHA and the trailing version comment.
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
    groups:
      # Collapse all action bumps into a single weekly PR instead of one per
      # action. Review the changelogs together, then merge once.
      github-actions:
        patterns:
          - "*"

  # Cargo dependency updates for the crate itself.
  - package-ecosystem: cargo
    directory: /
    schedule:
      interval: weekly
    groups:
      # Batch low-risk patch/minor bumps. Major bumps (and 0.x minor bumps,
      # which are breaking) stay as separate PRs so cryptography-adjacent
      # dependencies get individual review.
      cargo-minor:
        update-types:
          - "minor"
          - "patch"