version: 2
updates:
  # Python (root pyproject.toml)
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5

  # JavaScript (codeflash npm package)
  - package-ecosystem: "npm"
    directory: "/packages/codeflash"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5

  # GitHub Actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5

  # code_to_optimize/ directories are test fixtures — do NOT update them.
  # Their package-lock.json files are gitignored to prevent Dependabot alerts.