Dependabot: Grouped updates for all dependency types - Githubissues

cedar-policy / cedar

Implementation of the Cedar Policy Language

https://www.cedarpolicy.com

Apache License 2.0

889 stars 80 forks source link

Dependabot: Grouped updates for all dependency types #1297

Closed adpaco-aws closed 3 weeks ago

adpaco-aws commented 3 weeks ago

Description of changes

Extends the Dependabot settings to:

Group all updates into one PR (more details here)
Allow updates for all dependency types. If I'm not mistaken, this should result in updates for both Cargo.toml and Cargo.lock files even for transitive dependencies (more details here)

Checklist for requesting a review

The change in this PR is (choose one, and delete the other options):

[x] A change "invisible" to users (e.g., documentation, changes to "internal" crates like cedar-policy-core, cedar-validator, etc.)

I confirm that this PR (choose one, and delete the other options):

[x] Does not update the CHANGELOG because my change does not significantly impact released code.

I confirm that cedar-spec (choose one, and delete the other options):

[x] Does not require updates because my change does not impact the Cedar formal model or DRT infrastructure.

I confirm that docs.cedarpolicy.com (choose one, and delete the other options):

[x] Does not require updates because my change does not impact the Cedar language specification.