version: 2
updates:
  # Rust section
  - package-ecosystem: cargo
    directory: '/'
    # serde, clap, and other dependencies sometimes have multiple updates in a week
    schedule:
      interval: weekly
      day: monday
      timezone: America/New_York
    # Limit dependabot to 1 PR per reviewer
    open-pull-requests-limit: 6
    labels:
      - 'C-trivial'
      - 'A-rust'
      - 'A-dependencies'
      - 'P-Low :snowflake:'
    groups:
        ecc:
          patterns:
            # deliberately include zcash_script (even though it is maintained by ZF)
            - "zcash_*|orchard|halo2*|incrementalmerkletree|bridgetree|equihash"
        prod:
          dependency-type: "production"
          exclude-patterns:
            - "zcash_*|orchard|halo2*|incrementalmerkletree|bridgetree|equihash"
        dev:
          dependency-type: "development"
  # Devops section
  - package-ecosystem: github-actions
    directory: '/'
    schedule:
      # tj-actions/changed-files often updates daily, which is too much for us
      interval: weekly
      day: wednesday
      timezone: America/New_York
    open-pull-requests-limit: 4
    labels:
      - 'C-trivial'
      - 'A-devops'
      - 'A-dependencies'
      - 'P-Low :snowflake:'
    groups:
      devops:
        patterns:
          - "*"