# Dependabot keeps dependencies and pinned action versions current.
# Three ecosystems live in this repo: Python (uv), the Playwright probe's npm
# packages, and the GitHub Actions used by the workflows.
version: 2
updates:
  # Python dependencies — pyproject.toml + uv.lock at the repo root.
  - package-ecosystem: "uv"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5
    groups:
      python-minor-patch:
        update-types: ["minor", "patch"]

  # Playwright accessibility probe — the only npm project with real
  # dependencies (the old /dashboard tree no longer exists).
  - package-ecosystem: "npm"
    directory: "/infra/pw-poc"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5
    groups:
      npm-minor-patch:
        update-types: ["minor", "patch"]

  # Pinned action versions in .github/workflows/.
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5
    groups:
      actions:
        patterns: ["*"]