Merge pull request #102 from collabora/dependabot-update-semver-chagnes

dependabot: Configure to only update on breaking semver changes

Author: sjoerdsimons

.github/dependabot.yaml

@@ -1,18 +1,42 @@
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
----
 version: 2
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    labels:
-      - "dependencies"
-
-  - package-ecosystem: "cargo"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    labels:
-      - "dependencies"
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: daily
+  labels:
+  - dependencies
+- package-ecosystem: cargo
+  directory: /
+  schedule:
+    interval: daily
+  ignore:
+  - dependency-name: anyhow
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: clap
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: flate2
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: serde
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: thiserror
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: tokio
+    update-types:
+    - version-update:semver-minor
+    - version-update:semver-patch
+  - dependency-name: '*'
+    update-types:
+    - version-update:semver-patch
+  labels:
+  - dependencies