1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
version: 2
updates:
# Rust dependencies (workspace). Grouped to keep PR volume low:
# minor-and-patch -> one auto-mergeable PR
# major-updates -> one PR for review (majors usually need code changes)
- package-ecosystem: cargo
directory: "/"
schedule:
interval: monthly
open-pull-requests-limit: 5
groups:
minor-and-patch:
update-types:
major-updates:
update-types:
ignore:
- dependency-name: "jsonwebtoken"
update-types:
- package-ecosystem: cargo
directory: "/integration_tests"
schedule:
interval: monthly
open-pull-requests-limit: 3
groups:
minor-and-patch:
update-types:
major-updates:
update-types:
# All GitHub Actions bumps arrive as ONE grouped PR (SHA + comment updates).
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: monthly
open-pull-requests-limit: 3
groups:
actions:
patterns:
- package-ecosystem: docker
directory: /
schedule:
interval: monthly
open-pull-requests-limit: 5
groups:
docker:
patterns: