Use dependabot, but only for major versions

This commit is contained in:
Jon Gjengset 2022-09-23 08:53:07 -07:00
parent 441dc27e4d
commit b783cb31ab

13
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,13 @@
version: 2
updates:
- package-ecosystem: cargo
directory: /
schedule:
interval: daily
ignore:
dependency-name: "*"
# patch and minor updates don't matter for libraries
# remove this ignore rule if your package has binaries
update-types:
- "version-update:semver-patch"
- "version-update:semver-minor"