Skip to content

Commit e45ea25

Browse files
committedNov 11, 2024
Remove the old disabled Dependabot configuration
In the past (#143), Dependabot version updates had been used to keep `cargo` dependencies up to date. This was removed in favor of doing manual updates based on automatic reports from `cargo deny` and the old `dependabot.yml` was kept but renamed to disable it and point people to #144 to learn about the change. Since then, Dependabot security updates, which are distinct from Dependabot version updates, were enabled (see #1254), and later, Dependabot version updates were reintroduced for GitHub Actions only (#1357). At that point, there were two Dependabot-related YAML files: the old disabled one, and the new one for GHA. This removes the old one, explaining the situation in a comment in the new one, including a link to #144. While doing so, this also adjusts the YAML code style there, to bring it in line with the style of most other YAML files in the repository.
1 parent 44ff412 commit e45ea25

File tree

2 files changed

+10
-15
lines changed

2 files changed

+10
-15
lines changed
 

‎.github/dependabot.yml

+10-7
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,12 @@
11
version: 2
22
updates:
3-
- package-ecosystem: github-actions
4-
directory: "/"
5-
schedule:
6-
interval: weekly
7-
groups:
8-
github-actions:
9-
patterns: ["*"]
3+
# We only use Dependabot *version* updates for GitHub Actions. Rust dependencies are checked via
4+
# `cargo deny` and manually updated (see https://github.com/GitoxideLabs/gitoxide/issues/144), or
5+
# by Dependabot *security* updates (which don't need the `cargo` ecosystem to be listed here).
6+
- package-ecosystem: github-actions
7+
directory: '/'
8+
schedule:
9+
interval: weekly
10+
groups:
11+
github-actions:
12+
patterns: ['*']

‎.github/dependabot.yml.disabled-see-issue-144

-8
This file was deleted.

0 commit comments

Comments
 (0)
Please sign in to comment.