Skip to content

ci: enable dependabot, add devel branch, sync workflows with doxx - #73

Open
bgreenwell wants to merge 2 commits into
develfrom
chore/actions-consistency
Open

ci: enable dependabot, add devel branch, sync workflows with doxx#73
bgreenwell wants to merge 2 commits into
develfrom
chore/actions-consistency

Conversation

@bgreenwell

Copy link
Copy Markdown
Owner

Summary

  • Dedupe AGENTS.md against the global CLAUDE.md conventions (separate commit, pre-existing local work)
  • Enable dependabot (cargo + github-actions), fixing the old disabled config's "group everything including majors" policy to match doxx/lstr (minor/patch grouped, majors individual)
  • Add a devel integration branch (already created and set as default) and update ci.yml/docs.yml branch triggers
  • Bump trailing action pins (webfactory/ssh-agent, cargo-binstall, configure-pages) to match doxx's current devel branch
  • Left xleak's release: published trigger model in publish-*.yml untouched - it's a deliberate, already-working design (doxx uses push: tags + workflow_dispatch instead), not drift
  • Document the devel->main release flow and dependabot/release.yml caveat in RELEASE_CHECKLIST.md and AGENTS.md

Test plan

  • cargo fmt --all -- --check
  • cargo clippy --all-targets -- -D warnings
  • cargo test (39 passed)
  • All edited workflow YAML validated with yaml.safe_load
  • CI green on Linux/macOS/Windows

Reference ../CLAUDE.md and drop clippy/fmt, conventional-commits, and
changelog-style bullets that just restate the global conventions.
Enable dependabot for cargo and github-actions dependencies (matching
doxx/lstr's minor/patch-grouped, majors-individual policy - the old
disabled config grouped majors in too). Add a devel integration branch
and update ci.yml/docs.yml triggers to match. Bump trailing action pins
(webfactory/ssh-agent, cargo-binstall, configure-pages) to match doxx's
current devel branch, leaving xleak's release-published trigger model
in publish-*.yml as-is. Document the devel->main release flow and the
"don't hand-merge dependabot's release.yml PRs" caveat in
RELEASE_CHECKLIST.md and AGENTS.md.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant