Update dependabot config

* group minor and patch updates
* add npm
* switch to monthly schedule for everything

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 14c2750fcb7bb9891ef0bebad3cb8555da21a23f..94f7430215aabb37b3cdc3331aee6a953f662162 100644 (file)
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,9 @@
 version: 2
 updates:
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: github-actions
     directory: "/"
+    cooldown:
+      default-days: 7
     schedule:
       interval: monthly
     labels:
@@ -10,15 +12,43 @@ updates:
       github-actions:
         patterns:
           - "*"
+        update-types:
+          - minor
+          - patch
+  - package-ecosystem: pip
+    directory: "/"
     cooldown:
       default-days: 7
-  - package-ecosystem: "pip"
-    directory: "/"
     schedule:
-      interval: weekly
+      interval: monthly
     labels:
       - dependencies
       - python
+    groups:
+      pip-deps:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+    versioning-strategy: lockfile-only
+  - package-ecosystem: npm
+    directory: "/"
     cooldown:
       default-days: 7
-    versioning-strategy: lockfile-only
+    schedule:
+      interval: monthly
+    labels:
+      - dependencies
+    versioning-strategy: increase
+    groups:
+      production-dependencies:
+        dependency-type: production
+        update-types:
+          - minor
+          - patch
+      development-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch