forked from 1b-agent/fieldcraft-upstream
Dependabot opens one grouped pull request a week per ecosystem against develop: compatible Cargo updates together (a breaking release on its own) and every action together, keeping the SHA pins and their version comments. The SolidCraft pins, the truck and egui-wgpu patches taken from that commit and craft-ui's rev move by hand; egui and eframe take patch releases only, since their line follows SolidCraft's. CI skips same-repo pull requests, so Dependabot's would merge untested: the gate, the oracle and the advisories now also run on pull requests opened by dependabot[bot]. The heavy job stays off pull requests. Closes #120 Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NmAttHhUZTokgPeEJia8sm