version: 2
updates:
  # Base images in the root Dockerfile (node:22-alpine).
  - package-ecosystem: docker
    directory: /
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies
      - docker

  # Base image in the cron sidecar (alpine).
  - package-ecosystem: docker
    directory: /docker
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies
      - docker

  # GitHub Actions in workflow files.
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies
      - ci

  # npm runtime + dev dependencies.
  - package-ecosystem: npm
    directory: /
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 10
    labels:
      - dependencies
      - npm
    groups:
      # Batch low-risk minor/patch bumps so the reviewer queue stays small.
      minor-and-patch:
        update-types:
          - minor
          - patch