dependabot.yml

# Configure Dependabot scanning.
version: 2

updates:
  # Check for updates to GitHub Actions.
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      github-actions:
        applies-to: version-updates
        update-types:
          - minor
          - patch

  # Check for updates to Composer packages.
  - package-ecosystem: "composer"
    directory: "/"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    ignore:
      # These dependencies do not currently need to be managed with Dependabot.
      - dependency-name: "squizlabs/php_codesniffer"
      - dependency-name: "wp-coding-standards/wpcs"
      - dependency-name: "phpcompatibility/php-compatibility"
      - dependency-name: "yoast/phpunit-polyfills"
    groups:
      composer-packages:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "composer/ca-bundle"

  # Monitor some npm dependencies for updates in groups.
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    ignore:
      - dependency-name: "@wordpress/*"
    groups:
      ##
      # Groups for updating devDependencies.
      ##

      # Dependencies related to Playwright testing (E2E, performance).
      tests-playwright:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*playwright*"
      # Dependencies related to JavaScript testing with QUnit.
      tests-qunit:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*qunit*"
          - "sinon*"
      # Dependencies related to CSS and SASS building and manilupating.
      dev-css-sass:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "autoprefixer"
          # postcss and css related dependencies.
          - "*css*"
          - "*sass"
      # Dependencies related to the Webpack build process.
      dev-webpack:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*webpack*"
          - "react-refresh"
          - "source-map-loader"
      # Dependencies related to the local Docker development environment.
      dev-docker:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "dotenv*"
          - "wait-on"
      # Dependencies that do not fall into a specific grouping.
      dev-miscellaneous:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "chalk"
          - "check-node-version"
          - "ink-docstrap"
          - "install-changed"
          - "matchdep"
          - "uuid"
      # Dependencies related to JavaScript minification.
      dev-uglify:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*uglify*"
      # All GruntJS related dependencies that do not relate to another group.
      dev-grunt:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*grunt*"

      ##
      # Groups for updating production dependencies.
      ##

      # Dependencies related to jQuery and its ecosystem.
      external-jquery:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "jquery*"
      # Dependencies related to React and its ecosystem.
      external-react:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "react*"
          - "!react-refresh"
      # Dependencies used for bundling polyfill libraries into WordPress.
      external-polyfills:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "core-js-url-browser"
          - "element-closest"
          - "formdata-polyfill"
          - "imagesloaded"
          - "objectFitPolyfill"
          - "polyfill-library"
          - "regenerator-runtime"
          - "whatwg-fetch"
          - "wicg-inert"
      # Dependencies related to the Masonry library.
      external-masonry:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "masonry-layout"
      # Dependencies that do not fall into a specific grouping.
      external-miscellaneous:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "backbone"
          - "clipboard"
          - "hoverintent"
          - "json2php"
          - "lodash"
          - "moment"
          - "underscore"

  # Monitor npm dependencies within default themes.
  - package-ecosystem: "npm"
    directory: "/src/wp-content/themes/twentytwentyfive"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      twentytwentyfive-css:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**browserslist*"
          - "*css*"

  - package-ecosystem: "npm"
    directory: "/src/wp-content/themes/twentytwentytwo"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      twentytwentytwo-css:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**browserslist*"
          - "*css*"

  - package-ecosystem: "npm"
    directory: "/src/wp-content/themes/twentytwentyone"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      twentytwentyone-sass-css:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**browserslist*"
          - "autoprefixer"
          - "*css*"
          - "*sass*"
          - "!*stylelint*"
      twentytwentyone-eslint:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**eslint*"
      twentytwentyone-stylelint:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**stylelint*"
      twentytwentyone-miscellaneous:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "chokidar-cli"
          - "minimist"
          - "npm-run-all"

  - package-ecosystem: "npm"
    directory: "/src/wp-content/themes/twentytwenty"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      twentytwenty-css:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**browserslist*"
          - "autoprefixer"
          - "*css*"
      twentytwenty-stylelint:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "*stylelint*"
      twentytwenty-miscellaneous:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "concurrently"
          - "@wordpress/scripts"

  - package-ecosystem: "npm"
    directory: "/src/wp-content/themes/twentynineteen"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 50
    cooldown:
      default-days: 7
    groups:
      twentynineteen-css-sass:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "**browserslist*"
          - "autoprefixer"
          - "*css*"
          - "*sass*"
      twentynineteen-miscellaneous:
        applies-to: version-updates
        update-types:
          - minor
          - patch
        patterns:
          - "chokidar-cli"
          - "npm-run-all"