version: 2
registries:
  gradle-plugin-portal:
    type: maven-repository
    url: https://plugins.gradle.org/m2
    username: dummy # Required by dependabot
    password: dummy # Required by dependabot

updates:
  - package-ecosystem: "npm"
    directory: "/sources"
    schedule:
      interval: "weekly"
    groups:
      npm-dependencies:
        patterns:
        - "*"
    ignore:
      - dependency-name: "typescript"
        versions: ["7.x"]
      - dependency-name: "@types/node"
        versions: ["25.x", "26.x"]
      # jest 30.5.0 reworked the ESM module registry, and nock no longer intercepts requests
      # made through @actions/http-client (undici): every mocked test silently hits the real
      # network instead. nock 15 does not fix it. Drop these two once they interoperate again.
      - dependency-name: "jest"
        versions: [">=30.5.0"]
      - dependency-name: "@jest/globals"
        versions: [">=30.5.0"]
  - package-ecosystem: "github-actions"
    # github-actions with directory: "/" only monitors .github/workflows
    # https://github.com/dependabot/dependabot-core/issues/6345
    directories:
      - "/"
      - "/.github/actions/build-dist"
      - "/.github/actions/init-integ-test"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
          - "*"

  - package-ecosystem: "gradle"
    directories:
      - ".github/workflow-samples/gradle-plugin"
      - ".github/workflow-samples/groovy-dsl"
      - ".github/workflow-samples/java-toolchain"
      - ".github/workflow-samples/kotlin-dsl"
      - ".github/workflow-samples/no-wrapper"
      - ".github/workflow-samples/no-wrapper-gradle-5"
      - "sources/test/init-scripts"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
    groups:
      gradle:
        patterns:
          - "*"