1# AI Software Factory — Dependabot 2# 3# Cadence: weekly, staggered so PRs do not pile up in one hour. 4# Groups bundle related updates into a single PR to reduce review churn. 5version: 2 6 7updates: 8 # --- npm (pnpm workspace: root + apps/* + packages/* + tests/*) ------------- 9 - package-ecosystem: "npm" 10 directory: "/" 11 schedule: 12 interval: "weekly" 13 day: "monday" 14 time: "06:00" 15 timezone: "UTC" 16 open-pull-requests-limit: 10 17 versioning-strategy: "increase" 18 labels: 19 - "dependencies" 20 - "npm" 21 groups: 22 # Lint + type tooling moves together (shared config, peer deps). 23 eslint-typescript: 24 patterns: 25 - "eslint" 26 - "prettier" 27 - "@typescript-eslint/*" 28 - "typescript" 29 # TipTap is a versioned bundle — updating major packages independently 30 # breaks the editor. 31 tiptap: 32 patterns: 33 - "@tiptap/*" 34 # AWS SDK v3 is modular; updating a single @aws-sdk/client-* leaves 35 # the rest behind. Group the whole family. 36 aws-sdk: 37 patterns: 38 - "@aws-sdk/*" 39 - "aws4" 40 - "smithy-client" 41 # Playwright is one moving unit. 42 playwright: 43 patterns: 44 - "@playwright/test" 45 - "playwright" 46 ignore: 47 # Prisma major bumps are deliberate (schema + client codegen changes); 48 # review those manually instead of auto-PRs. 49 - dependency: "prisma" 50 update-types: ["version-update:semver-major"] 51 - dependency: "@prisma/client" 52 update-types: ["version-update:semver-major"] 53 54 # --- Docker (docker-compose dev environment) --------------------------------- 55 - package-ecosystem: "docker" 56 directory: "/infrastructure/docker" 57 schedule: 58 interval: "weekly" 59 day: "tuesday" 60 time: "06:00" 61 timezone: "UTC" 62 open-pull-requests-limit: 5 63 labels: 64 - "dependencies" 65 - "docker" 66 67 # --- GitHub Actions ----------------------------------------------------------- 68 - package-ecosystem: "github-actions" 69 directory: "/" 70 schedule: 71 interval: "weekly" 72 day: "wednesday" 73 time: "06:00" 74 timezone: "UTC" 75 open-pull-requests-limit: 5 76 labels: 77 - "dependencies" 78 - "ci" 79 commit-message: 80 prefix: "ci(deps)" 81