version: 2

# 标签由维护者手动添加，各生态关闭默认打标，避免重新创建旧标签。
updates:
  - package-ecosystem: github-actions
    directory: /
    labels: []
    schedule:
      interval: weekly
      day: monday
      time: '09:00'
      timezone: Asia/Shanghai
    groups:
      minor-and-patch:
        update-types:
          - minor
          - patch

  - package-ecosystem: cargo
    directory: /backend
    labels: []
    schedule:
      interval: weekly
      day: monday
      time: '09:10'
      timezone: Asia/Shanghai
    # 按官方 Codex 锁文件、协议指纹或已审计 fork 固定；完成对应核对与实测后再手动升级。
    ignore:
      - dependency-name: aws-lc-rs
      - dependency-name: hyper
      - dependency-name: hyper-rustls
      - dependency-name: hyper-tls
      - dependency-name: hyper-util
      - dependency-name: native-tls
      - dependency-name: openssl
      - dependency-name: openssl-src
      - dependency-name: openssl-sys
      - dependency-name: reqwest
      - dependency-name: rustls
      - dependency-name: rustls-native-certs
      - dependency-name: rustls-pki-types
      - dependency-name: tokio
      - dependency-name: tokio-native-tls
      - dependency-name: tokio-rustls
      - dependency-name: tokio-tungstenite
      - dependency-name: tungstenite
      - dependency-name: zstd
    groups:
      minor-and-patch:
        update-types:
          - minor
          - patch

  - package-ecosystem: npm
    directory: /frontend
    labels: []
    schedule:
      interval: weekly
      day: monday
      time: '09:20'
      timezone: Asia/Shanghai
    cooldown:
      default-days: 1
    groups:
      minor-and-patch:
        update-types:
          - minor
          - patch

  - package-ecosystem: docker
    directories:
      - /deploy
    labels: []
    schedule:
      interval: weekly
      day: monday
      time: '09:30'
      timezone: Asia/Shanghai
    groups:
      minor-and-patch:
        update-types:
          - minor
          - patch