Commit Graph

5 Commits

Author SHA1 Message Date
Martin Robinson
9669deff50 Update dependencies held back from dependabot (#30394)
The dependabot configuration contained some number of ignored versions
that date from when GitHub dependabot support was added. These versions
fall into three categories:

 - Versions that are older or the same version as the version we use.
 - Versions that are newer than the versions we use.
 - Versions for crates we no longer depend on.

This change removes all ignored versions and updates dependencies in
the second category.
2023-09-21 08:43:48 +00:00
Martin Robinson
5b3bd6439e Upgrade bumpalo and stop holding it back for dependabot (#30303)
This fixes a dependabot security alert.
2023-09-06 10:10:12 +00:00
Mukilan Thiyagarajan
c373666e27 Revert "Enable grouping of patch updates in Dependabot (#30208)" (#30250)
This reverts commit 531067c631.
2023-08-31 05:36:50 +00:00
Mukilan Thiyagarajan
531067c631 Enable grouping of patch updates in Dependabot (#30208)
This feature was released recently. This could potentially cut
down on the CI hours spent on merging dependabot PRs.

More info here:
https://github.blog/2023-08-24-a-faster-way-to-manage-version-updates-with-dependabot/

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-version-updates-with-comment-commands
2023-08-28 18:02:17 +00:00
dependabot-preview[bot]
fc66a4850c Upgrade to GitHub-native Dependabot 2021-04-28 16:46:43 +00:00