# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
# SPDX-License-Identifier: GPL-3.0-or-later
# FILE INFORMATION
# DEFGROUP: GitHub.Dependabot
# INGROUP: MokoStandards.Security
# REPO: https://git.mokoconsulting.tech/MokoConsulting/MokoStandards
# PATH: /.github/dependabot.yml
# VERSION: 03.09.03
# BRIEF: Dependabot configuration for automated dependency updates and security patches
# NOTE: Monitors GitHub Actions for vulnerabilities and keeps ecosystem secure

version: 2
updates:
  # Monitor GitHub Actions for security updates
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 1
    labels:
      - "dependencies"
      - "security"
      - "automated"
    commit-message:
      prefix: "chore(deps)"
      include: "scope"
    reviewers:
      - "mokoconsulting-tech/maintainers"
    assignees:
      - "jmiller-moko"
    # Group all updates together
    groups:
      github-actions:
        patterns:
          - "*"

  # Monitor Python dependencies for security updates
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 1
    labels:
      - "dependencies"
      - "security"
      - "automated"
      - "python"
    commit-message:
      prefix: "chore(deps)"
      include: "scope"
    reviewers:
      - "mokoconsulting-tech/maintainers"
    assignees:
      - "jmiller-moko"
    # Group all updates together
    groups:
      python-dependencies:
        patterns:
          - "*"

  # Monitor npm dependencies for security updates
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 1
    labels:
      - "dependencies"
      - "security"
      - "automated"
      - "javascript"
    commit-message:
      prefix: "chore(deps)"
      include: "scope"
    reviewers:
      - "mokoconsulting-tech/maintainers"
    assignees:
      - "jmiller-moko"
    # Group all updates together
    groups:
      npm-dependencies:
        patterns:
          - "*"

  # Monitor Composer dependencies for security updates
  - package-ecosystem: "composer"
    directory: "/"
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 1
    labels:
      - "dependencies"
      - "security"
      - "automated"
      - "php"
    commit-message:
      prefix: "chore(deps)"
      include: "scope"
    reviewers:
      - "mokoconsulting-tech/maintainers"
    assignees:
      - "jmiller-moko"
    # Group all updates together
    groups:
      composer-dependencies:
        patterns:
          - "*"
