dependabot.yml

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns: ["*"]
  - package-ecosystem: "cargo"
    directory: "/backend"
    schedule:
      interval: "weekly"
    groups:
      cargo:
        patterns: ["*"]
  - package-ecosystem: "npm"
    directory: "/frontend"
    schedule:
      interval: "weekly"
    groups:
      npm:
        patterns: ["*"]
    ignore:
      - dependency-name: "@types/node"
        # Depends on Node.js version, which we upgrade manually
        update-types: ["version-update:semver-major"]
      - dependency-name: "eslint"
        # ESLint major upgrades usually have breaking changes, #213 for ESLint 9
        update-types: ["version-update:semver-major"]
      - dependency-name: "typescript"
        # TypeScript 5.6 is not compatible with typescript-eslint, #439
        update-types: ["version-update:semver-minor"]