version: 2
updates:
# Rust dependencies. Patch bumps batch into one PR that the
# dependabot-auto-merge workflow merges automatically once CI passes; minor
# and major updates arrive as individual PRs for manual review. The `chore`
# prefix keeps the commit subject Conventional Commits compliant.
- package-ecosystem: cargo
directory: "/"
schedule:
interval: weekly
commit-message:
prefix: chore
ignore:
# bincode 3.0.0 is a `compile_error!` placeholder, not a real release.
# Scope the ignore to that exact version so a genuine future 3.x still
# surfaces.
- dependency-name: bincode
versions:
groups:
cargo-patch:
update-types:
# GitHub Actions pinned in the workflows (checkout, docker, install-action).
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
commit-message:
prefix: ci
groups:
actions-patch:
update-types: