version: 2
updates:
  # go modules -- one grouped PR for everything
  - package-ecosystem: gomod
    directory: /
    schedule:
      interval: weekly
    groups:
      go-deps:
        patterns: ["*"]

  # dockerfile base images (golang, alpine)
  - package-ecosystem: docker
    directory: /
    schedule:
      interval: weekly
    ignore:
      # stay on golang 1.25.x -- allow patch tags only, not 1.26+
      - dependency-name: golang
        update-types: ["version-update:semver-minor", "version-update:semver-major"]

  # the workflow actions themselves
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly