# Dependency update PRs target dev (main only accepts promotions from dev).
# Grouped and weekly so they arrive as a few reviewable PRs, not a stream.
version: 2
updates:
  - package-ecosystem: pip
    directory: /backend
    target-branch: dev
    schedule:
      interval: weekly
    open-pull-requests-limit: 5
    groups:
      backend:
        patterns: ["*"]
        update-types: [minor, patch]

  - package-ecosystem: npm
    directory: /frontend
    target-branch: dev
    schedule:
      interval: weekly
    open-pull-requests-limit: 5
    groups:
      frontend:
        patterns: ["*"]
        update-types: [minor, patch]

  - package-ecosystem: github-actions
    directory: /
    target-branch: dev
    schedule:
      interval: monthly
    groups:
      actions:
        patterns: ["*"]