version: 2
updates:
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    open-pull-requests-limit: 10
    labels:
      - "dependencies"
    groups:
      # Bundle all major version bumps into a single weekly PR so they
      # stay visible without flooding the PR list. Minor/patch updates
      # still get individual PRs.
      major-updates:
        applies-to: version-updates
        update-types:
          - "major"
        patterns:
          - "*"

  - package-ecosystem: github-actions
    directory: "/"
    schedule:
      interval: weekly
      day: monday
      time: "06:00"
    open-pull-requests-limit: 5