# Configuration for Dependabot automatic dependency updates
# See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

version: 2
updates:
  # Monitor testing dependencies only
  - package-ecosystem: "nuget"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "06:00"
    # Dependencies are controlled via the groups below
    # Group dependencies to reduce PR noise
    groups:
      testing-frameworks:
        patterns:
          - "xunit.*"
          - "Microsoft.NET.Test.Sdk"
          - "coverlet.*"
          - "GitHubActionsTestLogger"
          - "Moq"
      opentelemetry-testing:
        patterns:
          - "OpenTelemetry*"
      serilog-testing:
        patterns:
          - "Serilog*"
      other-testing:
        patterns:
          - "Anthropic.SDK"
          - "System.Linq.AsyncEnumerable"
          - "System.Net.Http"
          - "JsonSchema.Net"
    # Ignore product dependencies - only allow testing dependencies in groups above
    ignore:
      # Ignore all Microsoft product dependencies except those explicitly defined in groups.
      - dependency-name: "Microsoft.Extensions.Hosting.Abstractions"
      - dependency-name: "Microsoft.Extensions.Logging.Abstractions"
      - dependency-name: "Microsoft.Extensions.AI.OpenAI"
      - dependency-name: "Microsoft.Extensions.TimeProvider.Testing"
      - dependency-name: "Microsoft.AspNetCore.*"
      - dependency-name: "Microsoft.IdentityModel.*"
      - dependency-name: "Microsoft.Bcl.*"
      - dependency-name: "Microsoft.SourceLink.*"
      # Ignore Roslyn/CodeAnalysis dependencies to maintain VS 2022 compatibility
      - dependency-name: "Microsoft.CodeAnalysis.*"
      # Ignore all System product dependencies except those explicitly in testing groups
      - dependency-name: "System.Diagnostics.*"
      - dependency-name: "System.IO.*"
      - dependency-name: "System.Text.*"
      - dependency-name: "System.Threading.*"
      - dependency-name: "System.Net.ServerSentEvents"
    # Limit the number of open pull requests for testing dependencies
    open-pull-requests-limit: 5
    # Add labels to dependency update PRs
    labels:
      - "dependencies"

  # Monitor GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "06:00"
    # Limit the number of open pull requests for GitHub Actions to 5
    open-pull-requests-limit: 5
    # Add labels to GitHub Actions update PRs
    labels:
      - "dependencies"