# Dependabot configuration for automated dependency updates
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates

version: 2
updates:
  # NPM dependencies for the monorepo
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "09:00"
      timezone: "UTC"
    open-pull-requests-limit: 10
    labels:
      - "dependencies"
      - "automated"
    commit-message:
      prefix: "chore(deps):"
    groups:
      # Group NestJS packages together
      nestjs:
        patterns:
          - "@nestjs/*"
        update-types:
          - "minor"
          - "patch"
      # Group React/Next.js packages together
      react-next:
        patterns:
          - "react"
          - "react-dom"
          - "next"
          - "@next/*"
        update-types:
          - "minor"
          - "patch"
      # Group TypeScript tooling
      typescript-tooling:
        patterns:
          - "typescript"
          - "typescript-eslint"
          - "@types/*"
          - "ts-*"
        update-types:
          - "minor"
          - "patch"
      # Group testing packages
      testing:
        patterns:
          - "jest"
          - "@jest/*"
          - "supertest"
          - "@types/jest"
        update-types:
          - "minor"
          - "patch"
      # Group linting/formatting
      linting:
        patterns:
          - "eslint"
          - "eslint-*"
          - "@eslint/*"
          - "prettier"
        update-types:
          - "minor"
          - "patch"
      # Group Tailwind CSS
      tailwind:
        patterns:
          - "tailwindcss"
          - "@tailwindcss/*"
          - "tailwind-*"
        update-types:
          - "minor"
          - "patch"
      # Group Prisma
      prisma:
        patterns:
          - "prisma"
          - "@prisma/*"
        update-types:
          - "minor"
          - "patch"
    ignore:
      # Ignore major version updates for critical packages (review manually)
      - dependency-name: "next"
        update-types: ["version-update:semver-major"]
      - dependency-name: "react"
        update-types: ["version-update:semver-major"]
      - dependency-name: "react-dom"
        update-types: ["version-update:semver-major"]
      - dependency-name: "@prisma/client"
        update-types: ["version-update:semver-major"]
      - dependency-name: "prisma"
        update-types: ["version-update:semver-major"]

  # Docker base images
  - package-ecosystem: "docker"
    directory: "/apps/portal"
    schedule:
      interval: "weekly"
      day: "monday"
    labels:
      - "dependencies"
      - "docker"

  - package-ecosystem: "docker"
    directory: "/apps/bff"
    schedule:
      interval: "weekly"
      day: "monday"
    labels:
      - "dependencies"
      - "docker"

  # GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
    labels:
      - "dependencies"
      - "github-actions"