MeshChatX/.github/dependabot.yml

version: 2
updates:
    - package-ecosystem: npm
      directory: /
      schedule:
          interval: weekly
      open-pull-requests-limit: 10
      versioning-strategy: increase-if-necessary
      groups:
          electron:
              patterns:
                  - electron
                  - electron-*
                  - "@electron/*"

    - package-ecosystem: github-actions
      directory: /
      schedule:
          interval: weekly
      open-pull-requests-limit: 10
      # Keep slsa-github-generator on a release tag (@vX.Y.Z). Dependabot SHA
      # pins break its prebuilt download path unless compile-generator is true.
      ignore:
          - dependency-name: "slsa-framework/slsa-github-generator"
      groups:
          actions:
              patterns:
                  - actions/*
                  - docker/*
                  - github/*
                  - sigstore/*
                  - pypa/*
                  - benchmark-action/*

    - package-ecosystem: uv
      directory: /
      schedule:
          interval: weekly
      open-pull-requests-limit: 10
      versioning-strategy: increase-if-necessary

    - package-ecosystem: gradle
      directory: /android
      schedule:
          interval: weekly
      open-pull-requests-limit: 10