Skip to content

Add monthly Dependabot updates for Cargo and GitHub Actions - #122

Merged
atulkhare4096 merged 2 commits into
microsoft:mainfrom
JamieMagee:chore/configure-dependabot
Oct 24, 2026
Merged

atulkhare4096 merged 2 commits into
microsoft:mainfrom
JamieMagee:chore/configure-dependabot

Conversation

@JamieMagee

Copy link
Copy Markdown
Member

Summary

  • Add monthly Dependabot updates for the Cargo workspace and GitHub Actions.
  • Group minor and patch updates while leaving major updates separate.

PR #121 covers weekly GitHub Actions updates only. This PR also covers the verified Cargo workspace and applies the requested monthly schedule and grouping policy to both ecosystems.

Validation

  • Validated the configuration against the SchemaStore Dependabot v2 schema.
  • Confirmed that the root Cargo workspace covers xtask and its ctrlc dependency.
  • Confirmed the action references in .github/workflows.
  • Confirmed that Docker references use build arguments or a local image, so Docker is excluded.
  • Confirmed that the diff contains only .github/dependabot.yml.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@atulkhare4096

Copy link
Copy Markdown
Contributor

Copilot resolve the merge conflicts in this pull request

@atulkhare4096

Copy link
Copy Markdown
Contributor

Copilot resolve the merge conflicts in this pull request

1 similar comment
@atulkhare4096

Copy link
Copy Markdown
Contributor

Copilot resolve the merge conflicts in this pull request

@atulkhare4096

Copy link
Copy Markdown
Contributor

Copilot Help me review this PR. Will it build if deployed to a branch?

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The configuration implements the requested coverage, schedule, and grouping policy with no identified blocking issues.

No open issues 🎉

What changed in this PR

Adds monthly Dependabot updates for the Cargo workspace and GitHub Actions, extending coverage beyond the Actions-only scope described for PR #121.

Changes:

  • Configures both ecosystems to check for updates monthly.
  • Groups minor and patch updates per ecosystem, leaving major updates separate.
File Description
.github/​dependabot.yml Adds monthly schedules and minor/patch update groups for Cargo and GitHub Actions.

Review effort: Balanced

@atulkhare4096
atulkhare4096 merged commit bb97589 into microsoft:main Oct 24, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants