Files
pezkuwi-sdk/.github/dependabot.yml
T
Satoshi Qazi Muhammed 1db05e10b4 chore: reduce dependabot noise + gate the mirror's GitLab CI honestly
dependabot: collapse routine cargo churn into two grouped weekly PRs (minor/patch
and major, separately) instead of one branch per crate, add a grouped entry for the
tools/usdt-bridge crate, and cap open PRs — this is what was flooding the repo.

.gitlab-ci.yml: this repo mirrors github, where the authoritative full CI runs on the
identical code. GitLab has no self-hosted runners registered on this namespace and the
shared-runner quota is exhausted, so the heavy pipeline can never pass here. Gate it
opt-in (RUN_GITLAB_CI=true) so the mirror stops showing perpetually-failing pipelines;
re-enable once a `pezkuwi-runner` is registered and minutes exist.
2026-07-24 17:40:27 -07:00

44 lines
1.4 KiB
YAML

version: 2
updates:
# GitHub Actions — one grouped PR/week for all workflow action bumps.
- package-ecosystem: github-actions
directory: '/'
labels: ["A1-insubstantial", "R0-no-crate-publish-required"]
schedule:
interval: weekly
open-pull-requests-limit: 3
groups:
ci_dependencies:
patterns:
- "*"
# Rust workspace (root). Collapse the routine churn into TWO grouped PRs a week
# (minor/patch together, major together) instead of one PR per crate — otherwise
# every unrelated bump opens its own branch and floods the repo (the reason we had
# to batch-close a pile of them). Majors stay in their own group so they still get
# a deliberate review before merge.
- package-ecosystem: "cargo"
directory: "/"
labels: ["A1-insubstantial", "R0-no-crate-publish-required"]
schedule:
interval: "weekly"
open-pull-requests-limit: 5
groups:
cargo-minor-patch:
update-types: ["minor", "patch"]
cargo-major:
update-types: ["major"]
# usdt-bridge is a separate crate/workspace with its own Cargo.lock; group its bumps
# so the bridge never spawns per-crate PRs of its own (e.g. the stray rand/rustls ones).
- package-ecosystem: "cargo"
directory: "/tools/usdt-bridge"
labels: ["A1-insubstantial"]
schedule:
interval: "weekly"
open-pull-requests-limit: 3
groups:
bridge-deps:
patterns:
- "*"