version: 2
updates:
# Patch and minor bumps arrive as one grouped PR so a quiet week is one
# review, not six. Majors come separately — they deserve to be read.
- package-ecosystem: cargo
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 5
groups:
cargo-minor:
patterns:
update-types:
# The workflows pin actions by major tag and this is what moves them — except
# dtolnay/rust-toolchain, which publishes no tags, so it is pinned to a branch
# and floats. Nothing here can bump that one.
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 5
groups:
actions:
patterns: