Skip to content

Point Dependabot at development (not main) #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
robertbetts merged 2 commits into from
Sep 1, 2026
Merged

Point Dependabot at development (not main) #26

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
aa673dd
Point Dependabot at development instead of main.
robertbetts Sep 1, 2026
086514b
Document feature → development → main and Dependabot targeting.
robertbetts Sep 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ updates:
schedule:
interval: monthly
open-pull-requests-limit: 5
# Prefer feature → development → main; Dependabot otherwise targets default (main).
target-branch: development
ignore:
# bincode 3.0.0 is an intentional unmaintained stub that only fails to compile.
- dependency-name: bincode
Expand All @@ -16,11 +18,15 @@ updates:
- "tonic-*"
- "prost"
- "prost-*"
sp1:
patterns:
- "sp1-*"
- package-ecosystem: cargo
directory: /clients/rust
schedule:
interval: monthly
open-pull-requests-limit: 3
target-branch: development
groups:
tonic-prost:
patterns:
Expand All @@ -32,3 +38,4 @@ updates:
directory: /
schedule:
interval: monthly
target-branch: development
6 changes: 5 additions & 1 deletion CONTRIBUTING.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,12 +72,16 @@ Do not run real CPU `SP1_PROVER=cpu --prove-one` on ≤16 GiB machines without

## Pull requests

1. Branch from `main` (or the active integration branch agreed with maintainers).
Flow: **feature → `development` → `main`**. Open product PRs against `development`, not `main`.

1. Branch from `development`.
2. Ensure mock CI paths pass locally when touching receipts, guests, or gRPC.
3. If you change the Lean SP1 guest or runtime patches, run `bash scripts/sp1_execute_ci.sh` locally (and refresh `artifacts/sp1_guest_digests.json` from Linux if digests change). Automatic `sp1-execute` CI is off for now — GH runners lack the compute.
4. Describe **why** in the PR body; link issues if any.
5. Do not commit secrets, `.env` files, `host/target/`, `.cache/`, or editor junk (e.g. `.#`).

Dependabot PRs target **`development`** (see [`.github/dependabot.yml`](.github/dependabot.yml)). That `target-branch` must stay on the default branch (`main`) or GitHub ignores it.

## Reporting issues

Use GitHub Issues for bugs and feature requests. For security-sensitive reports, see [SECURITY.md](SECURITY.md).
Expand Down