You can also enable Dependabot for the Rust dependencies (but I haven't done that before with Cargo Workspaces). And you can also customize Dependabot in multiple ways, such as grouping update pull requests, ignoring certain dependencies, ignoring patch version updates, ...
As discussed in https://github.com/hiltontj/serde_json_path/pull/94#issuecomment-2266471331
You can also enable Dependabot for the Rust dependencies (but I haven't done that before with Cargo Workspaces). And you can also customize Dependabot in multiple ways, such as grouping update pull requests, ignoring certain dependencies, ignoring patch version updates, ...