Skip to content

ci(deps): quieten dependabot, unblock the newer stable clippy - #3

Merged
deanott merged 1 commit into
mainfrom
ci/dependabot-monthly
Aug 23, 2026
Merged

ci(deps): quieten dependabot, unblock the newer stable clippy#3
deanott merged 1 commit into
mainfrom
ci/dependabot-monthly

Conversation

@deanott

@deanott deanott commented Aug 23, 2026

Copy link
Copy Markdown
Owner

Two things that were making the dependabot PRs cost more than they return.

Volume. Weekly cargo updates with only patch grouped meant a lockfile PR most weeks. Both ecosystems move to monthly, and patch-sweep widens to patch + minor, so a whole month of routine bumps arrives as one PR and only a major gets a branch of its own. The gui and wayland-x11 groups stay: those move as families.

Correctness. The msrv job pins dtolnay/rust-toolchain to the exact rust-version in the root Cargo.toml, which dependabot reads as a version to chase (#1 offered 1.95 -> 1.100). Taking that bump would leave the job green while testing nothing, so the action is now in an ignore list with the reason next to it. The MSRV moves by hand, alongside Cargo.toml, when egui moves it. #1 is closed.

Also fixes the three chunks_exact_to_as_chunks errors in cat_logo's tests. They are new in clippy 1.98, so they never appeared on the last green run of main (14 Aug) and instead surfaced as a failure on #2, where they read as the rmcp bump's fault. #2 should go green once this lands and it rebases.

Verified with the eight cat_logo tests and a clean cargo fmt --all --check. Local clippy is 1.96 and cannot reproduce the lint, so CI is the real check here.

🤖 Generated with Claude Code

https://claude.ai/code/session_01L4WQKmPwXy8gKaG8Aqp3C9

Two things that were making the dependabot PRs cost more than they
return.

Volume. Weekly cargo updates with only patch grouped meant a lockfile PR
most weeks. Both ecosystems move to monthly, and patch-sweep widens to
patch + minor, so a whole month of routine bumps arrives as one PR and
only a major gets a branch of its own. The gui and wayland-x11 groups
stay: those move as families.

Correctness. The msrv job pins dtolnay/rust-toolchain to the exact
rust-version in the root Cargo.toml, which dependabot reads as a version
to chase (PR #1 offered 1.95 -> 1.100). Taking that bump would leave the
job green while testing nothing, so the action is now in an ignore list
with the reason written next to it. The MSRV moves by hand, alongside
Cargo.toml, when egui moves it.

Also fixes the three chunks_exact_to_as_chunks errors in cat_logo's
tests. They are new in clippy 1.98, so they never appeared on the last
green run of main (14 Aug) and instead surfaced as a failure on the rmcp
PR, where they read as the bump's fault. Verified with the eight
cat_logo tests and a clean cargo fmt; local clippy is 1.96 and cannot
reproduce them.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01L4WQKmPwXy8gKaG8Aqp3C9
@deanott
deanott merged commit 98f68c7 into main Aug 23, 2026
9 checks passed
@deanott
deanott deleted the ci/dependabot-monthly branch August 23, 2026 16:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant