version: 2
updates:
  # Maintain dependencies for GitHub Actions - Update once every week.
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "saturday"
    labels:
      - "type: update"
      - "status: needs review"
      - "team: guardians"
      - "prio: medium"

  # Maintain dependencies for Composer.
  - package-ecosystem: "composer"
    directory: "/"
    # Make sure we don't clog our automated tests, so we runt it after midnight.
    schedule:
      interval: "daily"
      time: "01:00"
      timezone: "Europe/Amsterdam"
    labels:
      - "type: update"
      - "status: needs review"
      - "team: guardians"
      - "prio: medium"
    # Let core team maintainers review it.
    reviewers:
      - "goalgorilla/maintainers"
    # Allow updates for all Drupal modules, lets leave the rest for now.
    allow:
      - dependency-name: "drupal*"
    ignore:
      - dependency-name: "npm*"
    # Prefix all commit messages with "Composer"
    # include a list of updated dependencies
    commit-message:
      prefix: "Updates: "
      include: "scope"
    # Control the maxmimum number of pull requests dependabot is allowed to have open
    open-pull-requests-limit: 100
