Comparing
konsti/dev/use-renovate-instead-of-dependabot
(77d930e
) withdev
(43c9ac5
)0%
- Improvements
- 0
- Regressions
- 0
- Untouched
- 6
- New
- 0
- Dropped
- 0
- Ignored
- 0
Benchmarks
Passed
sudoku-easy
benches/sudoku.rs::benches::bench_solve::sudoku-easy0%
3.9 ms
3.9 ms
backtracking_disjoint_versions
benches/backtracking.rs::benches::bench_group::backtracking_disjoint_versions0%
2.3 s
2.3 s
sudoku-hard
benches/sudoku.rs::benches::bench_solve::sudoku-hard0%
4.3 ms
4.3 ms
backtracking_singletons
benches/backtracking.rs::benches::bench_group::backtracking_singletons0%
4.3 s
4.3 s
backtracking_ranges
benches/backtracking.rs::benches::bench_group::backtracking_ranges0%
2 s
2 s
large_case_u16_NumberVersion.ron
benches/large_case.rs::benches::bench_nested::large_cases::large_case_u16_NumberVersion.ron0%
25.1 ms
25.1 ms
Commits
Click on a commit to change the comparison rangeBase
dev
43c9ac5
0%
Use Renovate instead of Dependabot
Dependabot always updates the lower bounds `Cargo.toml`, instead of only `Cargo.lock` for compatible updates, while updating `Cargo.toml` for breaking updates , as we want it for a library.
From https://docs.renovatebot.com/configuration-options/#rangestrategy:
> replace: Replace the range with a newer one if the new version falls outside it, and update nothing otherwise
>
> update-lockfile: Update the lock file when in-range updates are available, otherwise replace for updates out of range.
Additionally with this migration, I've pinned GitHub Actions to hashes, which unlike tags can't be changed.
The basic Renovate config is smaller than the dependabot config, it uses autodiscovery and finds Cargo and GitHub Actions. There's a dashboard with the option to create and rebase PRs and with logs.
You can see a demo of this change and the PRs renovate creates in https://github.com/konstin/pubgrub-renovate.
To actually enable this change, we need to give the Renovate Mend GitHub app access to the repository.
3d389fa
4 days ago
by konstin0%
Merge branch 'dev' into konsti/dev/use-renovate-instead-of-dependabot
77d930e
4 days ago
by konstin