From e919982fa2966fa09f159ba34aa51eb1e9966dfc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Th=C3=A2n=20Minh=20Ngh=C4=A9a?= Date: Fri, 6 Nov 2026 04:11:03 +0700 Subject: [PATCH] ci: Dependabot groups Cargo minor/patch updates; breaking bumps by crate family (#3395) Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2c4b8cb1a4..f92b4ccfed 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,11 +7,30 @@ updates: interval: "daily" time: "06:00" timezone: "America/New_York" - # Consolidate updates into a single PR rather than one PR per crate + # Minor and patch updates share one PR. A breaking bump gets its own PR so one API change + # doesn't hold the safe updates back (#2973). For cargo, Dependabot counts a 0.y bump of a + # 0.x crate as major, as Cargo does. A dependency goes to the first group it matches, so the + # crate families that must move together come before the catch-all. groups: + egui: + patterns: + - "egui" + - "egui_*" + - "eframe" + - "winit" + fonts: + patterns: + - "skrifa" + - "harfrust" + hayro: + patterns: + - "hayro-*" cargo-dependencies: patterns: - "*" + update-types: + - "minor" + - "patch" commit-message: prefix: "chore(deps)"