Dependabot can now automatically update your Rust toolchain versions defined in rust-toolchain.toml and rust-toolchain files, helping you keep your Rust projects up-to-date with the latest stable, beta, or nightly releases. This applies to version updates and not to security updates.

What’s new

Rust projects often pin their toolchain versions using rust-toolchain.toml files to ensure consistent builds across team members and CI environments. Dependabot now monitors these files and creates pull requests when newer toolchain versions are available.

Supported update patterns

Dependabot supports updating:

  • Versioned toolchains (e.g., channel = "1.xx.yy", channel = "1.xx")
  • Dated toolchains (e.g., channel = "nightly-YYYY-MM-DD", channel = "beta-YYYY-MM-DD")

Getting started

To enable Rust toolchain updates, add a rust-toolchain configuration to your .github/dependabot.yml file. See the Dependabot options reference for detailed configuration options and examples.

Learn more