Silence Dependabot

[spikespaz]

It seems like I get way too many dependency update notifications for this repository. I have edited the version requirements in Cargo.toml to be less-specific. We should rely on Cargo.lock to provide exact versions.

I am truly sorry that I never contributed to this project. Maybe some day.

[cathaysia]

does this work for you?

[spikespaz]

It sure does, but you don't need to be so specific with the versions in Cargo.toml either. Generally, you rely on crate authors to follow semver. No reason to be rude, either.

[spikespaz]

Besides, I am subscribed for notifications because I want to keep an eye on this project, so I'm not going to ignore it. I shouldn't have to, that makes notifications, well, useless.