Merge pull request #51 from IDilettant/dependabot-config

Update Dependabot config

Author: fey

.github/dependabot.yml

@@ -1,17 +1,37 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
+---
 version: 2
 updates:
-  - package-ecosystem: "composer" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: github-actions
+    directory: /
     schedule:
-      interval: "weekly"
-
-  - package-ecosystem: "github-actions"
-    directory: "/"
+      interval: weekly
+    labels: [dependencies, automated, actions]
+    groups:
+      actions-minor-patch:
+        update-types: [minor, patch]
+      actions-major:
+        update-types: [major]
+  # PHP dev
+  - package-ecosystem: composer
+    directory: /
     schedule:
-      # Check for updates to GitHub Actions every week
-      interval: "weekly"
+      interval: weekly
+    labels: [dependencies, automated, dev]
+    allow:
+      - dependency-type: development
+    groups:
+      composer-dev-minor-patch:
+        update-types: [minor, patch]
+      composer-dev-major:
+        update-types: [major]
+  # PHP prod
+  - package-ecosystem: composer
+    directory: /
+    schedule:
+      interval: weekly
+    labels: [dependencies, automated, prod]
+    allow:
+      - dependency-type: production
+    groups:
+      composer-runtime-minor-patch:
+        update-types: [minor, patch]