This change adds dependabot to the repository. Dependabot checks the
project "supply chain" (dependencies) for published vulnerabilities, and
automatically creates PRs to resolve those dependency version updates.
The result should look something like this PR:
https://github.com/influxdata/influxdb-pb-data-protocol/pull/3
This is my first dependabot configuration for Cargo/Rust. I used tokio
tracing for a quick sanity check:
4b75e54053/.github/dependabot.yml
Adds a GitHub CI action:
* Uses the rust-toolchain file to install the requested version.
* Performs a build with default cargo target
* Runs workspace tests
* Checks cargo fmt is happy
* Runs clippy for lints, denying warnings
All commands taken from the existing CircleCI pipeline.
Currently no caching / reuse of build container.
Jacob Marble
Carol (Nichols || Goulding)
Marko Mikulicic
Raphael Taylor-Davies
Andrew Lamb
Andrew Lamb
Dom
Edd Robinson