Skip to content

Have Dependabot update the extension's Rust dependencies - #185

Merged
dduugg merged 2 commits into
mainfrom
add-dependabot-ecosystems
Oct 12, 2026
Merged

dduugg merged 2 commits into
mainfrom
add-dependabot-ecosystems

Conversation

@dduugg

@dduugg dduugg commented Oct 12, 2026

Copy link
Copy Markdown
Contributor
  • Adds a cargo entry to .github/dependabot.yml, so Dependabot updates the native extension's crates (magnus, rb-sys and the rest), not just the gems and actions.
  • It points at the root workspace, whose only member is ext/code_ownership and whose Cargo.lock is tracked, with the same monthly schedule, single group and 7-day cooldown as the other entries.
  • I bumped the gem version (or don't need to) 💎

Dependabot updated the gem's bundler dependencies and its actions, but
not the crates the native extension builds from, so `magnus`, `rb-sys`
and the rest were updated only by hand. The cargo entry points at the
root, whose workspace has the extension as its only member and whose
Cargo.lock is tracked. It takes the same monthly schedule, single group
and 7-day cooldown as the other entries.
@github-project-automation github-project-automation Bot moved this to Triage in Modularity Oct 12, 2026
Sort `updates` alphabetically by package-ecosystem, with no blank lines
between entries. Dependabot treats each entry on its own, so the order
changes nothing, but a sorted list gives each new ecosystem one obvious
place to go.
@dduugg
dduugg marked this pull request as ready for review October 12, 2026 20:48
@dduugg
dduugg requested a review from a team as a code owner October 12, 2026 20:48
@dduugg
dduugg merged commit b2d1513 into main Oct 12, 2026
17 checks passed
@dduugg
dduugg deleted the add-dependabot-ecosystems branch October 12, 2026 20:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant