version: 2
updates:
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    # Each dependency update gets its own pull request, including major
    # version bumps. A grouped major PR cannot merge when one member has
    # a blocked upgrade, so it hides the other ready majors. Separate PRs
    # let each major land on its own. The limit holds the initial burst
    # of pending majors plus the regular minor and patch updates.
    open-pull-requests-limit: 20
    labels:
      - "dependencies"

  - package-ecosystem: github-actions
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    open-pull-requests-limit: 5