Skip to content

Expand Dependabot coverage across Rust crates and frontend apps, run daily#238

Merged
loid345 merged 1 commit intomainfrom
codex/fix-resource-access-error-in-cargo-audit
Feb 8, 2026
Merged

Expand Dependabot coverage across Rust crates and frontend apps, run daily#238
loid345 merged 1 commit intomainfrom
codex/fix-resource-access-error-in-cargo-audit

Conversation

@loid345
Copy link
Contributor

@loid345 loid345 commented Feb 8, 2026

Motivation

  • Ensure all Rust crates, the MCP/server/admin modules, and frontend Leptos apps receive frequent dependency updates so libraries remain current.
  • Allow Dependabot to propose major updates in grouped PRs and run checks daily to reduce drift across the monorepo.

Description

  • Updated .github/dependabot.yml to change update intervals from weekly to daily and replaced the previous minor-updates groups with all-updates that allow major, minor, and patch update-types.
  • Added per-package entries for relevant Cargo directories (for example apps/admin, apps/server, apps/storefront, apps/mcp, and many crates/* folders) and switched the npm app entries (/apps/next-frontend, /apps/next-admin, /apps/storefront, /apps/admin) to daily all-updates.
  • Updated .github/workflows/dependencies.yml to grant the workflow security-events: write permission to support security-related automation.
  • Changes were committed with the message Expand Dependabot coverage.

Testing

  • No automated tests were run because this is a CI/configuration-only change.
  • The updated dependabot.yml and workflow files were inspected in-repo to verify the new entries and permissions were added successfully.

Codex Task

@loid345 loid345 merged commit 47eb749 into main Feb 8, 2026
23 of 24 checks passed
@loid345 loid345 deleted the codex/fix-resource-access-error-in-cargo-audit branch February 8, 2026 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant