version: 2
updates:
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: weekly
    open-pull-requests-limit: 5
    groups:
      security-patches:
        applies-to: security-updates
        update-types:
          - patch
          - minor
      production-deps:
        dependency-type: production
        patterns:
          - "*"
        exclude-patterns:
          - "@types/*"
    ignore:
      - dependency-name: "react"
        update-types:
          - version-update:semver-major