From 5760bd6bd9f5d37774d439114257a0a63390385d Mon Sep 17 00:00:00 2001
From: Ed Morley <emorley@salesforce.com>
Date: Fri, 4 Sep 2026 13:48:31 +0100
Subject: [PATCH] Enable Dependabot updates for transitive dependencies

Configure Dependabot's `allow` key with `dependency-type: all` so it
also updates transitive dependencies (those only in the lockfile), not
just direct dependencies. This removes the need to manually refresh
lockfiles.

https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#allow--

GUS-W-24099599.
---
 .github/dependabot.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e2ae683..45a6e67 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,9 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    allow:
+      # Update transitive dependencies too.
+      - dependency-type: "all"
     labels:
       - "dependencies"
       - "rust"
@@ -45,6 +48,9 @@ updates:
     # chance of picking up a too-new release).
     cooldown:
       default-days: 0
+    allow:
+      # Update transitive dependencies too.
+      - dependency-type: "all"
     labels:
       - "dependencies"
       - "python"