graylog2-server/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: maven
    directory: "/"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    ignore:
      # The AWS SDKs receive patch updates almost every day. Reduce dependabot
      # pull-request noise by ignoring patch updates.
      - dependency-name: "software.amazon.awssdk:bom"
        update-types: ["version-update:semver-patch"]
      - dependency-name: "com.amazonaws:aws-java-sdk-bom"
        update-types: ["version-update:semver-patch"]
      # Lucene >=10 requires JDK 21
      - dependency-name: "org.apache.lucene:lucene-*"
        versions:
          - ">= 10"
      # we want to manually update the opensearch-java client as long as it requires intensive testing
      - dependency-name: "org.opensearch.client:opensearch-java"
    groups:
      openrewrite:
        patterns:
          - "org.openrewrite:*"
          - "org.openrewrite.maven:*"
          - "org.openrewrite.recipe:*"
    open-pull-requests-limit: 25
    labels:
      - dependencies
      - maven
    rebase-strategy: "disabled"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/packages/graylog-web-plugin"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    ignore:
      - dependency-name: react-bootstrap
        versions:
          - ">= 1.a"
          - "< 2"
    rebase-strategy: "disabled"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    ignore:
      - dependency-name: bootstrap
        versions:
          - ">= 4.a"
          - "< 5"
    rebase-strategy: "disabled"
    groups:
      dnd-kit:
        patterns:
          - "@dnd-kit/*"
      mantine:
        patterns:
          - "@mantine/*"
      openfonts:
        patterns:
          - "@openfonts/*"
      tanstack:
        patterns:
          - "@tanstack/*"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/packages/babel-preset-graylog"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    rebase-strategy: "disabled"
    groups:
      babel:
        patterns:
          - "@babel/*"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/packages/eslint-config-graylog"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    rebase-strategy: "disabled"
    groups:
      typescript-eslint:
        patterns:
          - "@typescript-eslint/*"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/packages/jest-preset-graylog"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    rebase-strategy: "disabled"
    groups:
      jest:
        patterns:
          - "babel-jest"
          - "jest"
          - "jest-environment-*"
          - "@jest/types"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/packages/stylelint-config-graylog"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    rebase-strategy: "disabled"

  - package-ecosystem: npm
    directory: "/graylog2-web-interface/docs"
    schedule:
      interval: daily
      time: "02:00"
      timezone: "Europe/Berlin"
    cooldown:
      default-days: 7
    open-pull-requests-limit: 10
    labels:
      - dependencies
    rebase-strategy: "disabled"