version: 2
updates:
  # Docker base image digest updates
  - package-ecosystem: docker
    directory: /
    schedule:
      interval: weekly
    commit-message:
      prefix: "docker"
    groups:
      docker-minor-patch:
        update-types:
          - "minor"
          - "patch"

  # GitHub Actions version updates
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
    commit-message:
      prefix: "ci"
    groups:
      actions-minor-patch:
        update-types:
          - "minor"
          - "patch"

  # Python dependency updates (pip)
  - package-ecosystem: pip
    directory: /
    schedule:
      interval: weekly
    commit-message:
      prefix: "deps"
    # Only open PRs for security updates to avoid noise
    open-pull-requests-limit: 5
    groups:
      pip-minor-patch:
        update-types:
          - "minor"
          - "patch"

  # Rust dependency updates (cargo workspace: crates/*)
  - package-ecosystem: cargo
    directory: /
    schedule:
      interval: weekly
    commit-message:
      prefix: "deps"
    open-pull-requests-limit: 5
    groups:
      cargo-minor-patch:
        update-types:
          - "minor"
          - "patch"

  # npm dependency updates (TS SDK, plugins, docs site)
  - package-ecosystem: npm
    directories:
      - "/sdk/typescript"
      - "/plugins/openclaw"
      - "/plugins/opencode"
      - "/docs"
    schedule:
      interval: weekly
    commit-message:
      prefix: "deps"
    open-pull-requests-limit: 5
    groups:
      npm-minor-patch:
        update-types:
          - "minor"
          - "patch"