version: 2
updates:
  # Rust dependencies — weekly security + version bumps.
  - package-ecosystem: cargo
    directory: /
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies
      - rust
    groups:
      minor-and-patch:
        update-types:
          - minor
          - patch

  # GitHub Actions versions — weekly.
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
      day: monday
    labels:
      - dependencies
      - github-actions
