# Weekly dependency update PRs for npm (frontend) and Cargo (src-tauri workspace).
# Review and merge like any other PR; run CI before merging.

version: 2
updates:
  - package-ecosystem: npm
    directory: /
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies

  - package-ecosystem: cargo
    directory: /src-tauri
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 5
    labels:
      - dependencies
    ignore:
      # Symphonia 0.6 is a coordinated migration (API break + isomp4 patch port).
      # See workdocs: internal/collaboration/tasks/2026-05-symphonia-0.6-migration/
      - dependency-name: symphonia
        versions: [">= 0.6"]
      - dependency-name: symphonia-adapter-libopus
        versions: [">= 0.3"]