version: 2
updates:
# Group minor + patch bumps into a single PR per ecosystem. Ungrouped, a
# quiet week still produces eight separate lockfile-only PRs.
- package-ecosystem: cargo
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 8
groups:
cargo-minor-patch:
update-types:
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 5
groups:
actions:
update-types:
ignore:
# The msrv job pins dtolnay/rust-toolchain to exact MSRV toolchains.
# Bumping the ref rewrites the MSRV floor and makes the job meaningless.
- dependency-name: "dtolnay/rust-toolchain"