pigx/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: maven
    directory: /
    schedule:
      interval: weekly
      day: monday
      time: "09:00"
      timezone: Asia/Shanghai
    open-pull-requests-limit: 5
    # 默认只自动处理 Maven patch 升级；LangChain4j 小版本升级也交给 Dependabot 自动建 PR。
    allow:
      - dependency-name: "*"
        update-types:
          - version-update:semver-patch
      - dependency-name: "dev.langchain4j:*"
        update-types:
          - version-update:semver-minor
    ignore:
      # 完全忽略 IJPay 的所有升级。
      - dependency-name: "com.github.javen205:IJPay-*"
      # 完全忽略 MyBatis-Plus BOM 的所有升级。
      - dependency-name: "com.baomidou:mybatis-plus-bom"
      # 完全忽略 MyBatis-Plus-Join 的所有升级。
      - dependency-name: "com.github.yulichang:mybatis-plus-join-*"
      # major 升级涉及迁移风险，仍保留人工评估。
      - dependency-name: "*"
        update-types:
          - version-update:semver-major
    commit-message:
      prefix: chore(deps)
    groups:
      # LangChain4j 单独分组，避免与普通 Maven patch 升级混在一个 PR。
      langchain4j:
        patterns:
          - "dev.langchain4j:*"
        update-types:
          - patch
          - minor
      maven-dependencies:
        patterns:
          - "*"
        exclude-patterns:
          - "dev.langchain4j:*"
        update-types:
          - patch

  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
      day: monday
      time: "09:30"
      timezone: Asia/Shanghai
    open-pull-requests-limit: 3
    ignore:
      - dependency-name: "*"
        update-types:
          - version-update:semver-minor
          - version-update:semver-major
    commit-message:
      prefix: ci(deps)
    groups:
      github-actions:
        patterns:
          - "*"