From 02d580332c7073e22313ebb29cd6df186a219820 Mon Sep 17 00:00:00 2001
From: Erik Johnston <erik@matrix.org>
Date: Mon, 14 Nov 2022 13:29:12 +0000
Subject: [PATCH 1/3] Make Dependabot only bump Rust deps in the lock file

This is to help downstream packagers.
---
 .github/dependabot.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9ee62bf5393f..7ce353ed6409 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,5 +18,6 @@ updates:
 
   - package-ecosystem: "cargo"
     directory: "/"
+    versioning-strategy: "lockfile-only"
     schedule:
       interval: "weekly"

From 520c3e7b8387415e5d576949223b847105c7eed1 Mon Sep 17 00:00:00 2001
From: Erik Johnston <erik@matrix.org>
Date: Mon, 14 Nov 2022 13:29:56 +0000
Subject: [PATCH 2/3] Newsfile

---
 changelog.d/14434.misc | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 changelog.d/14434.misc

diff --git a/changelog.d/14434.misc b/changelog.d/14434.misc
new file mode 100644
index 000000000000..75d24cd73d28
--- /dev/null
+++ b/changelog.d/14434.misc
@@ -0,0 +1 @@
+Make Dependabot only bump Rust deps in the lock file.

From b2950ede5eefa21246d93348ac078377e8f10c79 Mon Sep 17 00:00:00 2001
From: Erik Johnston <erik@matrix.org>
Date: Mon, 14 Nov 2022 13:58:23 +0000
Subject: [PATCH 3/3] Revert Cargo.toml bound changes

---
 rust/Cargo.toml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 48f6144b2979..cffaa5b51b94 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -20,16 +20,16 @@ crate-type = ["lib", "cdylib"]
 name = "synapse.synapse_rust"
 
 [dependencies]
-anyhow = "1.0.66"
+anyhow = "1.0.63"
 lazy_static = "1.4.0"
 log = "0.4.17"
-pyo3 = { version = "0.17.3", features = ["extension-module", "macros", "anyhow", "abi3", "abi3-py37"] }
+pyo3 = { version = "0.17.1", features = ["extension-module", "macros", "anyhow", "abi3", "abi3-py37"] }
 pyo3-log = "0.7.0"
 pythonize = "0.17.0"
-regex = "1.7.0"
-serde = { version = "1.0.147", features = ["derive"] }
-serde_json = "1.0.87"
+regex = "1.6.0"
+serde = { version = "1.0.144", features = ["derive"] }
+serde_json = "1.0.85"
 
 [build-dependencies]
-blake2 = "0.10.5"
+blake2 = "0.10.4"
 hex = "0.4.3"