version: 2 updates: # Frontend — npm - package-ecosystem: "npm" directory: "/apps/frontend" schedule: interval: "weekly" open-pull-requests-limit: 5 groups: frontend-dependencies: patterns: - "*" ignore: # Pourquoi : @angular/build épingle typescript (>=6.0 <6.1) et vitest (^4). Une majeure # de l'un ou l'autre casse `npm ci` tant qu'Angular ne suit pas. - dependency-name: "typescript" update-types: ["version-update:semver-major"] - dependency-name: "vitest" update-types: ["version-update:semver-major"] - dependency-name: "@vitest/coverage-v8" update-types: ["version-update:semver-major"] # Tests de bout en bout, paquet npm distinct du frontend - package-ecosystem: "npm" directory: "/tests/e2e" schedule: interval: "weekly" open-pull-requests-limit: 2 groups: e2e-dependencies: patterns: - "*" # Backend — uv (lit pyproject.toml / uv.lock) - package-ecosystem: "uv" directory: "/apps/backend" schedule: interval: "weekly" open-pull-requests-limit: 5 groups: backend-dependencies: patterns: - "*" # Les workflows GitHub Actions eux-mêmes ont aussi des dépendances à jour - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" # Si un Dockerfile existe pour le backend - package-ecosystem: "docker" directory: "/apps/backend" schedule: interval: "weekly" - package-ecosystem: "docker" directory: "/apps/frontend" schedule: interval: "weekly" # Images du reverse proxy et du compagnon ACME, épinglées dans les fichiers Compose - package-ecosystem: "docker-compose" directory: "/" schedule: interval: "weekly"