version: 2 updates: # npm dependencies (single root package.json, no workspaces) - package-ecosystem: "npm" directory: "/" schedule: interval: "weekly" day: "monday" open-pull-requests-limit: 15 labels: - "dependencies" - "npm" commit-message: prefix: "chore" prefix-development: "chore" include: "scope" groups: dev-patch-updates: dependency-type: "development" update-types: - "patch" dev-minor-updates: dependency-type: "development" update-types: - "minor" prod-patch-updates: dependency-type: "production" update-types: - "patch" prod-minor-updates: dependency-type: "production" update-types: - "minor" # Major bumps grouped so they land as a single reviewable PR instead of # one-per-package noise. These often need manual follow-up (Electron, # React, Vite, Tailwind, Express 5, etc.). major-updates: update-types: - "major" ignore: # typescript-eslint declares `typescript: >=4.8.4 <6.1.0`, and TypeScript 7 # removed `ts.Extension`, which @typescript-eslint/typescript-estree reads # at import time. Bumping to 7 makes `eslint .` fail to load its own config, # so `npm run lint` cannot run at all. Drop this once typescript-eslint # supports TypeScript 7. - dependency-name: "typescript" update-types: ["version-update:semver-major"] # Docker base images (docker/Dockerfile + docker-compose / compose-dev) - package-ecosystem: "docker" directory: "/docker" schedule: interval: "weekly" day: "monday" open-pull-requests-limit: 10 labels: - "dependencies" - "docker" commit-message: prefix: "chore" include: "scope" groups: docker-patch-updates: update-types: - "patch" docker-minor-updates: update-types: - "minor" docker-major-updates: update-types: - "major" # GitHub Actions used across the workflows in .github/workflows - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" day: "monday" open-pull-requests-limit: 10 labels: - "dependencies" - "github-actions" commit-message: prefix: "ci" include: "scope" groups: github-actions: update-types: - "patch" - "minor" - "major"