Skip to content

chore(deps): group Hyperlight Cargo updates - #350

Merged
simongdavies merged 1 commit into
mainfrom
simongdavies-group-hyperlight-updates
Sep 7, 2026
Merged

chore(deps): group Hyperlight Cargo updates#350
simongdavies merged 1 commit into
mainfrom
simongdavies-group-hyperlight-updates

Conversation

@simongdavies

Copy link
Copy Markdown
Member

Summary

Add a hyperlight group matching hyperlight-* to the existing multi-directory Cargo entry in .github/dependabot.yml. Eligible version updates for matching crates are grouped into a single PR across /src/sandbox/runtime and /src/code-validator/guest.

  • Uses the default applies-to: version-updates behavior, with no major/minor/patch restriction.
  • Preserves daily 03:00 schedules, seven-day cooldowns, PR limits, and all non-Hyperlight configuration. Nonmatching Cargo dependencies remain ungrouped.
  • Leaves security updates unchanged; this does not combine security and version updates in one PR.

This config-only follow-up is separate from the dependency changes in #349.

Validation

Parsed YAML with PyYAML and compared it structurally with the baseline, confirming the new Cargo group is the only configuration change. git diff --check passed. No native build is needed for this config-only change.

Configuration follows the official Dependabot grouping reference.

Group hyperlight-* version updates across the existing Cargo directories.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Simon Davies <simongdavies@users.noreply.github.com>
Copilot AI lite review requested due to automatic review settings September 7, 2026 17:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The change is a small, valid Dependabot YAML update that preserves existing behavior while only adding the intended Cargo grouping.

Pull request overview

This PR updates Dependabot configuration to group Cargo version updates for Hyperlight-related crates across the sandbox runtime and code-validator guest workspaces, reducing PR noise while keeping existing schedules and limits intact.

Changes:

  • Add a hyperlight Dependabot group for Cargo updates using the pattern hyperlight-*.
  • Keep the existing multi-directory Cargo configuration, schedule (daily 03:00), cooldown, and PR limits unchanged.
File summaries
File Description
.github/dependabot.yml Adds a Cargo groups.hyperlight entry to group hyperlight-* crate version updates across both configured Cargo directories.
Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@simongdavies
simongdavies merged commit e6cb2f6 into main Sep 7, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants