e72abfe ci: add Dependabot config for github-actions and cargo.
📊 Changes
1 file changed (+39 additions, -0 deletions)
View changed files
➕.github/dependabot.yml (+39 -0)
📄 Description
Weekly schedule (Mondays), 7-day cooldown, grouped updates to keep PR
noise low. Actions updates prefixed ci, Cargo prefixed deps. Major
version bumps for Cargo crates are ignored - those are for manualreview
given they can introduce breaking API or behaviour changes.
After merging this, go to settings -> Advanced security and turn everything on.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/dani-garcia/vaultwarden/pull/6990
**Author:** [@TriplEight](https://github.com/TriplEight)
**Created:** 3/22/2026
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `pr/3x8-dependabot`
---
### 📝 Commits (1)
- [`e72abfe`](https://github.com/dani-garcia/vaultwarden/commit/e72abfe5f057f0f11370edbcf0768814b87d4d6c) ci: add Dependabot config for github-actions and cargo.
### 📊 Changes
**1 file changed** (+39 additions, -0 deletions)
<details>
<summary>View changed files</summary>
➕ `.github/dependabot.yml` (+39 -0)
</details>
### 📄 Description
Weekly schedule (Mondays), 7-day cooldown, grouped updates to keep PR
noise low. Actions updates prefixed `ci`, Cargo prefixed `deps`. Major
version bumps for Cargo crates are ignored - those are for manualreview
given they can introduce breaking API or behaviour changes.
After merging this, go to settings -> Advanced security and turn everything on.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/dani-garcia/vaultwarden/pull/6990
Author: @TriplEight
Created: 3/22/2026
Status: ❌ Closed
Base:
main← Head:pr/3x8-dependabot📝 Commits (1)
e72abfeci: add Dependabot config for github-actions and cargo.📊 Changes
1 file changed (+39 additions, -0 deletions)
View changed files
➕
.github/dependabot.yml(+39 -0)📄 Description
Weekly schedule (Mondays), 7-day cooldown, grouped updates to keep PR
noise low. Actions updates prefixed
ci, Cargo prefixeddeps. Majorversion bumps for Cargo crates are ignored - those are for manualreview
given they can introduce breaking API or behaviour changes.
After merging this, go to settings -> Advanced security and turn everything on.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.