Stop pinning dependencies

Author: dhardy

.github/dependabot.yml

@@ -1,16 +1,5 @@
 version: 2
 updates:
-- package-ecosystem: cargo
-  directory: "/"
-  versioning-strategy: lockfile-only
-  allow:
-    - dependency-type: "all"
-  schedule:
-    interval: weekly
-  groups:
-    all-deps:
-      patterns:
-        - "*"
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:

.github/workflows/test.yml

@@ -18,14 +18,6 @@ permissions:
   contents: read #  to fetch code (actions/checkout)
 
 jobs:
-  lockfile:
-    name: Lockfile is up-to-date
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-      - uses: dtolnay/rust-toolchain@stable
-      - run: cargo check --workspace --locked
-
   clippy:
     name: Clippy
     runs-on: ubuntu-latest
@@ -110,6 +102,9 @@ jobs:
         if: ${{ matrix.variant == 'minimal_versions' }}
         run: |
           cargo generate-lockfile -Z minimal-versions
+      - name: Not MSRV
+        if: ${{ matrix.variant != 'MSRV' }}
+        run: cargo generate-lockfile --ignore-rust-version
       - name: Maybe nightly
         if: ${{ matrix.toolchain == 'nightly' }}
         run: |

.gitignore

@@ -1,4 +1,5 @@
 target
+Cargo.lock
 rand_wasm_bindgen_test*.[tj]s
 rand_wasm_bindgen_test*.wasm
 /benches/Cargo.lock