ci(dependabot): fix cargo workspace updates and refresh lockfiles (#629)

* ci(dependabot): fix cargo workspace updates and refresh lockfiles

Remove nested Cargo workspace members from Dependabot's cargo directories to avoid manifest resolution failures during grouped updates.

Add a Dependabot-only workflow that refreshes affected Cargo lockfiles, including the no_std target-specific resolution path, so CI can continue enforcing --locked and --frozen builds.

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* ci(dependabot): address workflow review comments

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* ci(dependabot): address workflow permission and toolchain comments

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* ci(dependabot): stage no-std lockfile refresh

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* ci(dependabot): harden refresh workflow

* ci(dependabot): refine workflow gating and staging

* ci(dependabot): harden workflow git operations

---------

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
This commit is contained in:
Anand Krishnamoorthi
2026-03-25 16:58:29 -05:00
committed by GitHub
parent 942dd47163
commit f69974dc1b
2 changed files with 129 additions and 3 deletions

View File

@@ -17,10 +17,7 @@ updates:
- "/bindings/java"
- "/bindings/python"
- "/bindings/ruby"
- "/bindings/ruby/ext/regorusrb"
- "/bindings/wasm"
- "/tests/ensure_no_std"
- "/xtask"
schedule:
interval: "weekly"
commit-message: