From 144deee6c722d2a92dfb83de1c44fc8028bb3e0e Mon Sep 17 00:00:00 2001 From: Payton McIntosh Date: Fri, 9 Oct 2026 00:17:43 +0100 Subject: [PATCH 1/2] Group leynos/shared-actions bumps into one Dependabot PR A bump of a leynos/shared-actions pin moves one commit SHA to another, and a SHA-to-SHA update has no semver level. The github-actions catch-all is limited to minor and patch, so it never took these updates and each pinned action or reusable workflow arrived as its own pull request. Add a `shared-actions` group with no update-types ahead of the catch-all, because Dependabot uses the first group that matches. Third-party action majors do not match its pattern and stay individual. --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b9f2d1801..824dad445 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,9 @@ updates: # Enable version updates for GitHub Actions - package-ecosystem: "github-actions" groups: + shared-actions: + patterns: + - 'leynos/shared-actions*' github-actions: patterns: - '*' From 3cd638e0f209e1b5d57cf64eb6c078ff8a59b40d Mon Sep 17 00:00:00 2001 From: Payton McIntosh Date: Fri, 9 Oct 2026 00:17:44 +0100 Subject: [PATCH 2/2] Ignore bincode 3 in Dependabot bincode 3.0.0 is a `compile_error!` stub, so a version bump to it can never build and only produces a failing pull request. Ignore versions at or above 3 for the cargo entry until a usable release exists. --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 824dad445..35a79b33c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -33,6 +33,11 @@ updates: update-types: - "minor" - "patch" + # bincode 3.0.0 is a `compile_error!` stub, so a bump to it cannot build. + # Drop this when a usable bincode 3 release exists. + ignore: + - dependency-name: "bincode" + versions: [">= 3"] open-pull-requests-limit: 5 labels: - "dependencies"