# AI Software Factory — Dependabot
#
# Cadence: weekly, staggered so PRs do not pile up in one hour.
# Groups bundle related updates into a single PR to reduce review churn.
version: 2

updates:
  # --- npm (pnpm workspace: root + apps/* + packages/* + tests/*) -------------
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "06:00"
      timezone: "UTC"
    open-pull-requests-limit: 10
    versioning-strategy: "increase"
    labels:
      - "dependencies"
      - "npm"
    groups:
      # Lint + type tooling moves together (shared config, peer deps).
      eslint-typescript:
        patterns:
          - "eslint"
          - "prettier"
          - "@typescript-eslint/*"
          - "typescript"
      # TipTap is a versioned bundle — updating major packages independently
      # breaks the editor.
      tiptap:
        patterns:
          - "@tiptap/*"
      # AWS SDK v3 is modular; updating a single @aws-sdk/client-* leaves
      # the rest behind. Group the whole family.
      aws-sdk:
        patterns:
          - "@aws-sdk/*"
          - "aws4"
          - "smithy-client"
      # Playwright is one moving unit.
      playwright:
        patterns:
          - "@playwright/test"
          - "playwright"
    ignore:
      # Prisma major bumps are deliberate (schema + client codegen changes);
      # review those manually instead of auto-PRs.
      - dependency: "prisma"
        update-types: ["version-update:semver-major"]
      - dependency: "@prisma/client"
        update-types: ["version-update:semver-major"]

  # --- Docker (docker-compose dev environment) ---------------------------------
  - package-ecosystem: "docker"
    directory: "/infrastructure/docker"
    schedule:
      interval: "weekly"
      day: "tuesday"
      time: "06:00"
      timezone: "UTC"
    open-pull-requests-limit: 5
    labels:
      - "dependencies"
      - "docker"

  # --- GitHub Actions -----------------------------------------------------------
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "wednesday"
      time: "06:00"
      timezone: "UTC"
    open-pull-requests-limit: 5
    labels:
      - "dependencies"
      - "ci"
    commit-message:
      prefix: "ci(deps)"