search

posit-dev / positron

Positron, a next-generation data science IDE
Other
2.41k stars 70 forks source link

Add dependabot for Rust dependencies #59

Closed jmcphers closed 1 year ago

jmcphers commented 1 year ago

Github recently taught Dependabot how to handle Rust.

https://github.blog/2022-06-06-github-brings-supply-chain-security-features-to-the-rust-community/

We should enable Dependabot for this repository so that we don't miss important security updates to Rust crates we depend on.

jmcphers commented 1 year ago

Turns out we get this for free. Proof! https://github.com/rstudio/positron/pull/94