version: 2
updates:
  # Maintain dependencies for GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
    # TS subpackages pin deps to 0.0.0-PLACEHOLDER; real versions are managed
    # in the root package.json Keep Dependabot out of them so it stops 
    # "bumping" the placeholder (see PR #267).
    exclude-paths:
      - "resolve-check-config/**"
      - "setup-install/**"
      - "supported-version/**"
    # @types/node tracks the Node runtime version, not the latest release;
    # bumping it ahead of the pinned Node version is noise.
    ignore:
      - dependency-name: "@types/node"