nextcloud-server/.github/dependabot.yml

# SPDX-FileCopyrightText: 2020 Nextcloud GmbH and Nextcloud contributors
# SPDX-License-Identifier: AGPL-3.0-or-later

version: 2
updates:
# GitHub Actions
- package-ecosystem: "github-actions"
  directory: "/"
  schedule:
    interval: monthly
    timezone: Europe/Paris
  groups:
    github-actions:
      patterns:
        - "*"
  labels:
    - "3. to review"
    - "feature: dependencies"

# Main composer (linting, testing, openapi)
- package-ecosystem: composer
  directories:
    - "/"
    - "/build/integration"
    - "/vendor-bin/cs-fixer"
    - "/vendor-bin/openapi-extractor"
    - "/vendor-bin/phpunit"
    - "/vendor-bin/psalm"
    - "/vendor-bin/rector"
  schedule:
    interval: weekly
    day: saturday
    time: "03:00"
    timezone: Europe/Paris
  labels:
    - "3. to review"
    - "feature: dependencies"

# Main master npm frontend dependencies
- package-ecosystem: npm
  directory: "/"
  schedule:
    interval: weekly
    day: saturday
    time: "03:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 20
  labels:
    - "3. to review"
    - "feature: dependencies"
  # Disable automatic rebasing because without a build CI will likely fail anyway
  rebase-strategy: "disabled"

# Latest stable release
# Composer dependencies for linting and testing
- package-ecosystem: composer
  target-branch: stable32
  directories:
    - "/"
    - "/build/integration"
    - "/vendor-bin/cs-fixer"
    - "/vendor-bin/openapi-extractor"
    - "/vendor-bin/phpunit"
    - "/vendor-bin/psalm"
  schedule:
    interval: weekly
    day: saturday
    time: "03:30"
    timezone: Europe/Paris
  labels:
    - "3. to review"
    - "feature: dependencies"
  ignore:
    # only patch updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major", "version-update:semver-minor"]

# Latest stable branch
# frontend dependencies
- package-ecosystem: npm
  target-branch: stable32
  directory: "/"
  schedule:
    interval: weekly
    day: saturday
    time: "03:30"
    timezone: Europe/Paris
  open-pull-requests-limit: 20
  labels:
    - "3. to review"
    - "feature: dependencies"
  # Disable automatic rebasing because without a build CI will likely fail anyway
  rebase-strategy: "disabled"
  ignore:
    # no major updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major"]

# Older stable releases

# Composer dependencies for linting and testing
- package-ecosystem: composer
  target-branch: stable31
  directories:
    - "/"
    - "/build/integration"
    - "/vendor-bin/cs-fixer"
    - "/vendor-bin/openapi-extractor"
    - "/vendor-bin/phpunit"
    - "/vendor-bin/psalm"
  schedule:
    interval: weekly
    day: saturday
    time: "04:00"
    timezone: Europe/Paris
  labels:
    - "3. to review"
    - "feature: dependencies"
  ignore:
    # only patch updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major", "version-update:semver-minor"]

- package-ecosystem: composer
  target-branch: stable30
  directories:
    - "/"
    - "/build/integration"
    - "/vendor-bin/cs-fixer"
    - "/vendor-bin/openapi-extractor"
    - "/vendor-bin/phpunit"
    - "/vendor-bin/psalm"
  schedule:
    interval: weekly
    day: saturday
    time: "04:00"
    timezone: Europe/Paris
  labels:
    - "3. to review"
    - "feature: dependencies"
  ignore:
    # only patch updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major", "version-update:semver-minor"]

# frontend dependencies
- package-ecosystem: npm
  target-branch: stable31
  directory: "/"
  schedule:
    interval: weekly
    day: saturday
    time: "04:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 20
  labels:
    - "3. to review"
    - "feature: dependencies"
  # Disable automatic rebasing because without a build CI will likely fail anyway
  rebase-strategy: "disabled"
  ignore:
    # no major updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major"]

- package-ecosystem: npm
  target-branch: stable30
  directory: "/"
  schedule:
    interval: weekly
    day: saturday
    time: "04:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 20
  labels:
    - "3. to review"
    - "feature: dependencies"
  # Disable automatic rebasing because without a build CI will likely fail anyway
  rebase-strategy: "disabled"
  ignore:
    # no major updates on stable branches
    - dependency-name: "*"
      update-types: ["version-update:semver-major"]