Dependabot now supports Rust toolchain updates
Dependabot can now automatically update your Rust toolchain versions defined in rust-toolchain.toml and rust-toolchain files, helping you keep your Rust projects up-to-date with the latest stable, beta, or nightly releases. This applies to version updates and not to security updates.
What’s new
Rust projects often pin their toolchain versions using rust-toolchain.toml files to ensure consistent builds across team members and CI environments. Dependabot now monitors these files and creates pull requests when newer toolchain versions are available.
Supported update patterns
Dependabot supports updating:
- Versioned toolchains (e.g.,
channel = "1.xx.yy",channel = "1.xx") - Dated toolchains (e.g.,
channel = "nightly-YYYY-MM-DD",channel = "beta-YYYY-MM-DD")
Getting started
To enable Rust toolchain updates, add a rust-toolchain configuration to your .github/dependabot.yml file. See the Dependabot options reference for detailed configuration options and examples.