# Every Dependabot PR triggers the full pipeline (~15 jobs), so version
# updates are batched weekly. Nx minor+patch updates use a dedicated group so
# official packages move together; other minor+patch updates are grouped per
# ecosystem, and majors remain individual. Security updates are separate and
# are not limited by this schedule; CI enforces complete Nx lockstep.
version: 2
updates:
    - package-ecosystem: npm
      directory: /
      schedule:
          interval: weekly
          day: monday
          time: '06:00'
      open-pull-requests-limit: 5
      groups:
          nx-version-updates:
              applies-to: version-updates
              patterns:
                  - nx
                  - '@nx/*'
              update-types:
                  - minor
                  - patch
          nx-security-updates:
              applies-to: security-updates
              patterns:
                  - nx
                  - '@nx/*'
          npm-minor-patch:
              applies-to: version-updates
              exclude-patterns:
                  - nx
                  - '@nx/*'
              update-types:
                  - minor
                  - patch

    - package-ecosystem: github-actions
      directory: /
      schedule:
          interval: weekly
          day: monday
          time: '06:00'
      groups:
          actions-minor-patch:
              patterns:
                  - '*'
              update-types:
                  - minor
                  - patch

    - package-ecosystem: docker
      directory: /docker
      schedule:
          interval: weekly
          day: monday
          time: '06:00'