From 7a4c937c9b08bdc2f0385a122bc44b0cfa4349b7 Mon Sep 17 00:00:00 2001 From: Douglas Eichelberger Date: Mon, 12 Oct 2026 17:17:31 -0700 Subject: [PATCH] Drop Dependabot's versioning strategy for cargo For cargo, Dependabot accepts only `auto` and `lockfile-only` as a versioning strategy, so it rejected the config's `increase`, and since #74 its `increase-if-necessary`, and ran no updates. `auto`, the default, already does what `increase-if-necessary` meant to: it updates Cargo.lock, and raises a requirement in Cargo.toml only for a release that the requirement doesn't allow. --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ec097d9..32f2f06 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,9 +4,9 @@ updates: directory: "/" schedule: interval: "monthly" - # Update Cargo.lock, and raise a requirement in Cargo.toml only for a - # release it doesn't allow - versioning-strategy: "increase-if-necessary" + # No versioning-strategy: for cargo, Dependabot accepts only auto and + # lockfile-only, and auto updates Cargo.lock, raising a requirement in + # Cargo.toml only for a release it doesn't allow groups: cargo: patterns: