ci, editoast: update 'opentelemetry' dependencies all at once

By default, Dependabot opens a new PR for each dependency. However, it doesn't work well for OpenTelemetry ecosystem which usually require a manual operation (see #7102, #7569, #8713). This modification in how Dependabot operates should help a bit. See [documentation](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups) Signed-off-by: Jean SIMARD <[email protected]>
OpenRailAssociation · Sep 25, 2024 · ea4eb9b · ea4eb9b
1 parent 5d1dd2c
commit ea4eb9b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,7 +3,13 @@ updates:
   - package-ecosystem: "cargo"
     directory: "/editoast/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    groups:
+      opentelemetry:
+        patterns:
+          - "opentelemetry*"
+          - "tracing-opentelemetry"
+          - "axum-tracing-opentelemetry"
     commit-message:
       prefix: "editoast:"
     open-pull-requests-limit: 100

diff --git a/editoast/Cargo.toml b/editoast/Cargo.toml
@@ -59,6 +59,8 @@ postgres-openssl = "0.5.0"
 pretty_assertions = "1.4.1"
 rand = "0.8.5"
 rangemap = "1.5.1"
+# 0.12.0 to 0.12.4 have weird timeout issues https://github.com/seanmonstar/reqwest/issues/2283
+# This bug was introduced between 0.12.0 and 0.12.3.
 reqwest = { version = "0.11.27", features = ["json"] }
 rstest = { version = "0.19.0", default-features = false }
 serde = { version = "1.0.210", features = ["derive"] }
@@ -152,8 +154,6 @@ redis = { version = "0.25.4", default-features = false, features = [
   "tokio-native-tls-comp",
 ] }
 regex = "1.10.6"
-# 0.12.0 to 0.12.4 have weird timeout issues https://github.com/seanmonstar/reqwest/issues/2283
-# This bug was introduced between 0.12.0 and 0.12.3.
 hostname.workspace = true
 lapin = "2.5.0"
 ordered-float = { version = "4.2.2", features = ["serde"] }