version: 2
updates:
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    # Each dependency update gets its own pull request, including major
    # version bumps. A grouped major PR cannot merge when one member has
    # a blocked upgrade, so it hides the other ready majors. Separate PRs
    # let each major land on its own. The limit holds the initial burst
    # of pending majors plus the regular minor and patch updates.
    open-pull-requests-limit: 20
    labels:
      - "dependencies"
    ignore:
      # @types/node describes the APIs available in the supported Node runtime.
      # Runtime major upgrades are deliberate compatibility changes, so keep
      # Dependabot on the current major until the runtime baseline moves too.
      - dependency-name: "@types/node"
        update-types:
          - "version-update:semver-major"

  - package-ecosystem: github-actions
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    open-pull-requests-limit: 5