version: 2
updates:
  ########################
  # GITHUB ACTIONS UPDATES
  - package-ecosystem: github-actions
    directory: '/'
    schedule:
      interval: weekly
    open-pull-requests-limit: 99
    labels:
      - 'pr: dependencies'
    groups:
      codeql-action:
        patterns:
          - 'github/codeql-action/*'

  ########################
  # NPM VERSION UPDATES
  - package-ecosystem: 'npm'
    directory: '/'
    exclude-paths:
      - 'examples/**'
    schedule:
      interval: 'weekly'
    # Do not spam too much, we'll adjust this setting if needed
    open-pull-requests-limit: 5
    labels:
      - 'pr: dependencies'
    cooldown:
      default-days: 5
      semver-major-days: 30
      # +1d compared to pnpm cutoff, otherwise Dependabot opens PRs too early
      # See https://github.com/facebook/docusaurus/pull/12241
      semver-minor-days: 8
      semver-patch-days: 8
    # Packages that must be upgraded atomically in a single PR
    # pnpm lint:catalogs checks that the catalog versions of each group match
    groups:
      # Released in lockstep, mixing versions breaks typechecking
      # See https://github.com/facebook/docusaurus/pull/12634
      typescript-eslint:
        patterns:
          - 'typescript-eslint'
          - '@typescript-eslint/*'
      # react-dom throws "Incompatible React versions" (dev and SSR)
      # if its version is not the exact same as react
      react:
        patterns:
          - 'react'
          - 'react-dom'
      # @types/react-dom has a peer dependency on the same @types/react version
      react-types:
        patterns:
          - '@types/react'
          - '@types/react-dom'
      # react-router-dom pins an exact react-router version
      # Mixing versions duplicates react-router and its Router context
      react-router:
        patterns:
          - 'react-router'
          - 'react-router-dom'
      # Workbox packages pin an exact workbox-core version
      # Mixing versions bundles duplicate workbox-core copies in the service worker
      workbox:
        patterns:
          - 'workbox-*'
      # @svgr/webpack pins exact @svgr/core and @svgr/plugin-* versions
      svgr:
        patterns:
          - '@svgr/*'
      # Babel packages depend on each other
      # Upgrading them independently duplicates Babel packages in the lockfile
      # See https://github.com/facebook/docusaurus/pull/12704
      babel:
        patterns:
          - '@babel/*'