version: 2

updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"

  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10

  # Python dependencies in cvat/requirements are managed by pip-compile-multi.
  # Dependabot should update source *.in files; generated *.txt files are
  # regenerated by a separate workflow.
  - package-ecosystem: "pip"
    directory: "/utils/dataset_manifest"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10
    exclude-paths:
      - "*.txt"

  # Dependabot resolves the full CVAT requirements graph for each candidate
  # update, while generated lock files are refreshed by the workflow below.
  - package-ecosystem: "pip"
    directory: "/cvat/requirements"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10
    exclude-paths:
      - "*.txt"
      - "all.in"