From 0d767abd0e28f5969ca7c6e9489b99e8f454d693 Mon Sep 17 00:00:00 2001 From: Will Jones Date: Fri, 24 Apr 2026 20:52:54 -0700 Subject: [PATCH] ci: add Dependabot config for shipped Rust binaries (#3300) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds `.github/dependabot.yml` enabling weekly cargo update PRs for the root workspace, which produces the Rust binaries we ship: the Node.js and Python native extensions. The `rust/lancedb` library crate shares the same lockfile — its consumers pick versions themselves, but bumping transitive deps here keeps the shipped binaries current. Also removes the misleading `exclude = ["python"]` line from the root `Cargo.toml`: `python` is listed in `members`, and `cargo metadata` confirms it's a workspace member, so the exclude was dead code that implied the opposite. Minor/patch updates are grouped to reduce PR noise. Part of #3292. Only covers the cargo ecosystem; pip, npm, and github-actions can follow. --- .github/dependabot.yml | 18 ++++++++++++++++++ Cargo.toml | 2 -- 2 files changed, 18 insertions(+), 2 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..4107990ea --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +version: 2 + +# Scope: the root Cargo workspace, which produces the Rust binaries we +# ship to users (the Node.js and Python native extensions). The +# `rust/lancedb` library crate shares the same lockfile; its consumers +# pick their own dependency versions, but bumping transitive deps here +# keeps the binaries we ship current. +updates: + - package-ecosystem: cargo + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 10 + groups: + rust-minor-patch: + update-types: + - minor + - patch diff --git a/Cargo.toml b/Cargo.toml index e8d5a95b4..074b0a869 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,7 +1,5 @@ [workspace] members = ["rust/lancedb", "nodejs", "python"] -# Python package needs to be built by maturin. -exclude = ["python"] resolver = "2" [workspace.package]