From f35ad137874a0d8abefb5f10c8752f8de96037d6 Mon Sep 17 00:00:00 2001
From: hellno <hellno@users.noreply.github.com>
Date: Thu, 11 Jun 2026 15:05:39 +0200
Subject: [PATCH] ci: drop cargo Dependabot ecosystem (template token breaks
 its parser)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This repo is a cargo-generate template, so Cargo.toml's package name is a
{{ }} Liquid token that Dependabot's cargo parser rejects — it was erroring on
every run. cargo Dependabot adds little here anyway (the GPUI stack is git-pinned
and Dependabot ignores git deps). Keep the github-actions ecosystem, which works
and keeps the SHA-pinned actions current. Generated forks have real names, so
cargo updates work there.
---
 .github/dependabot.yml | 21 ++++++---------------
 1 file changed, 6 insertions(+), 15 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 119e4da..35fe137 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,21 +1,12 @@
-# Dependabot configuration for Deck.
+# Dependabot configuration for Deck — GitHub Actions only.
 #
-# NOTE: the GPUI stack (gpui / gpui_platform / gpui-component / gpui-component-assets)
-# is pinned to exact GIT commits and is bumped ONLY via `just bump-gpui`. Dependabot's
-# `cargo` ecosystem proposes updates for registry (crates.io) deps and the lockfile;
-# it does NOT touch git dependencies, so those pins stay under `just bump-gpui` control.
+# No `cargo` ecosystem on purpose: this repo is a cargo-generate template, so Cargo.toml's
+# package name is a `{{ }}` token and Dependabot's cargo parser rejects it. (It would add
+# little here anyway — the GPUI stack is git-pinned and bumped via `just bump-gpui`, and
+# Dependabot ignores git deps.) A generated fork has real names, so cargo updates work there.
 version: 2
 updates:
-  # crates.io dependencies (serde, serde_json, directories, tray-icon, objc2*, raw-window-handle).
-  - package-ecosystem: "cargo"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 5
-    commit-message:
-      prefix: "deps"
-
-  # GitHub Actions (keeps the SHA-pinned actions in ci.yml current).
+  # GitHub Actions — keeps the SHA-pinned actions in ci.yml current.
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule: