Commit graph

19 commits

Author SHA1 Message Date
Alex Touchet
d4528e84b9
Use consistent spacing and alphabetize dependabot.yml (#38012)
This uses consistent spacing for indentation. I'm not sure if it was
causing any issues but it has been a problem before (#36642). Also
reorder categories to be in alphabetical order.

Testing: No testing for Dependabot file.

Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>
2025-07-12 10:37:26 +00:00
sagudev
34e21157de
Fixup dependabot.yml (#36642)
fixups https://github.com/servo/servo/pull/36641, as yaml was not valid
(one ` ` to many).

Testing: No testing for bot config.

Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>
2025-04-22 05:44:47 +00:00
sagudev
a69efed6e9
dependabot: group objc2 crates (#36641)
or else their PRs will fail in tidy:
https://github.com/servo/servo/pull/36637
https://github.com/servo/servo/pull/36635

Testing: It's bot config so no testing is possible.

Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>
2025-04-22 04:39:36 +00:00
Alex Touchet
5a5e49ce47
Update Dependabot stylo crates again (#36154)
Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>
2025-03-25 18:03:47 +00:00
sagudev
f65b697a5a
Update names of stylo crates in dependabot.yml (#36137)
This is response to https://github.com/servo/servo/pull/36128 that is caused by renames that happened in upstream https://github.com/servo/stylo/pull/150.

Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>
2025-03-25 12:16:02 +00:00
Alex Touchet
e928697982
Add epaint_default_fonts to egui Dependabot group (#35823)
Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>
2025-03-07 12:14:21 +00:00
Alex Touchet
6becee2f2e
Create servo-media Dependabot group (#35098)
Signed-off-by: Alex Touchet <26315797+atouchet@users.noreply.github.com>
2025-01-20 22:45:47 +00:00
Jonathan Schwender
5970132595
build(deps): bump napi-ohos related crates (#34227)
* bump napi-ohos* crates to 1.0.2

Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>

* dependabot: group napi-ohos related updates

Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>

---------

Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
2024-11-12 06:49:54 +00:00
Samson
a13900c4f8
Update dependabot.yml to only contain one group key (#33912)
I think this will resolve problem observed in https://github.com/servo/servo/pull/33896#issuecomment-2422930003

Signed-off-by: Samson <16504129+sagudev@users.noreply.github.com>
2024-10-19 10:38:25 +00:00
Alex Touchet
1e5c844eb5
Add more crates to egui Dependabot group (#32711) 2024-07-06 05:51:31 +00:00
Martin Robinson
e14e079fff
servoshell: Update all egui dependencies and group them for dependabot (#32683)
This updates egui, making the necessary changes to maintain behavior. In
addition, it groups dependencies so that they are updated in a single PR
by dependabot, avoiding manual work.
2024-07-04 06:36:19 +00:00
Martin Robinson
6a48c72a62
dependabot: Combine more GStreamer / GLib-related crates (#32563)
GLib, GIO, and GObject all release together, so these should be grouped
to prevent having so many dependabot PRs.
2024-06-19 19:34:51 +00:00
Martin Robinson
f97753df6d
dependabot: Group all GStreamer dependencies together for upgrades (#32378)
The GStreamer we use is a bracing 24 crates, which tends to flood our CI
infrastructure. Group them together in order to make things more
manageable.
2024-05-24 21:48:58 +00:00
Samson
63d7af54d1
Ignore stylo crates in dependabot.yml (#31790)
* Ignore stylo crates in dependabot.yml

* Update .github/dependabot.yml

Co-authored-by: Martin Robinson <mrobinson@igalia.com>

---------

Co-authored-by: Martin Robinson <mrobinson@igalia.com>
2024-03-20 20:34:34 +00:00
Martin Robinson
9669deff50
Update dependencies held back from dependabot (#30394)
The dependabot configuration contained some number of ignored versions
that date from when GitHub dependabot support was added. These versions
fall into three categories:

 - Versions that are older or the same version as the version we use.
 - Versions that are newer than the versions we use.
 - Versions for crates we no longer depend on.

This change removes all ignored versions and updates dependencies in
the second category.
2023-09-21 08:43:48 +00:00
Martin Robinson
5b3bd6439e
Upgrade bumpalo and stop holding it back for dependabot (#30303)
This fixes a dependabot security alert.
2023-09-06 10:10:12 +00:00
Mukilan Thiyagarajan
c373666e27
Revert "Enable grouping of patch updates in Dependabot (#30208)" (#30250)
This reverts commit 531067c631.
2023-08-31 05:36:50 +00:00
Mukilan Thiyagarajan
531067c631
Enable grouping of patch updates in Dependabot (#30208)
This feature was released recently. This could potentially cut
down on the CI hours spent on merging dependabot PRs.

More info here:
https://github.blog/2023-08-24-a-faster-way-to-manage-version-updates-with-dependabot/

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-version-updates-with-comment-commands
2023-08-28 18:02:17 +00:00
dependabot-preview[bot]
fc66a4850c
Upgrade to GitHub-native Dependabot 2021-04-28 16:46:43 +00:00