dependabot.yml

# This is the dependabot configuration file that automates dependency updates
# Updates section configures how dependabot should handle dependency updates:
#
# - Monitors NPM dependencies in the root directory
# - Checks for updates weekly
# - Groups updates based on their type (dev grouped by minor/patch or prod grouped by patch)
#
# - Monitors GitHub Actions dependencies in the root directory
# - Checks for updates weekly
#
# Learn more at https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#configuration-options-for-the-dependabotyml-file
version: 2
updates:
  - package-ecosystem: npm
    directory: /
    schedule:
      interval: weekly
    groups:
      npm-development:
        dependency-type: development
        update-types:
          - minor
          - patch
      npm-production:
        dependency-type: production
        update-types:
          - patch
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly