Labels: infrastructure, security
Priority: Low
Estimated Time: 1 hour
Description:
With both a Rust workspace (Cargo.lock) and, after #70, a JS lockfile, dependency updates currently appear to be manual. Automated PRs would reduce the drift that likely contributed to some of the "merge conflict" compile errors currently blocking 11 test modules.
Tasks:
- Add a Dependabot or Renovate config covering both
cargo and npm ecosystems
- Configure a reasonable update cadence (e.g. weekly) and auto-merge policy for patch-level updates
- Document the policy in
CONTRIBUTING.md
Labels:
infrastructure,securityPriority: Low
Estimated Time: 1 hour
Description:
With both a Rust workspace (
Cargo.lock) and, after #70, a JS lockfile, dependency updates currently appear to be manual. Automated PRs would reduce the drift that likely contributed to some of the "merge conflict" compile errors currently blocking 11 test modules.Tasks:
cargoandnpmecosystemsCONTRIBUTING.md