version: 2
updates:
  - package-ecosystem: "github-actions"
    cooldown:
      default-days: 7
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
          - "*"

  - package-ecosystem: "cargo"
    cooldown:
      default-days: 7
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      cargo:
        patterns:
          - "*"

  # .pre-commit-config.yaml is the single place typos, zizmor, lychee, and the
  # file-hygiene hooks are pinned, so this is what keeps those linters current.
  - package-ecosystem: "pre-commit"
    cooldown:
      default-days: 7
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      pre-commit:
        patterns:
          - "*"

  # rust-toolchain.toml pins an exact toolchain so rustfmt and clippy behave the
  # same everywhere; this keeps that pin at the latest stable release.
  - package-ecosystem: "rust-toolchain"
    cooldown:
      default-days: 7
    directory: "/"
    schedule:
      interval: "weekly"

  # Base images of the e2e adapters (e2e/*/Dockerfile). The applications they test are pinned
  # by ARGs with checksums, which Dependabot cannot update.
  - package-ecosystem: "docker"
    cooldown:
      default-days: 7
    directories:
      - "/e2e/*"
    schedule:
      interval: "weekly"
    ignore:
      # Upstream's rolling test image, deliberately unpinned (see e2e/bash-completion/Dockerfile).
      - dependency-name: "ghcr.io/scop/bash-completion/test"
    groups:
      e2e-docker:
        patterns:
          - "*"