From 2dfb23e5ec136cbc1d1fa758de2dd007f4f3a3ab Mon Sep 17 00:00:00 2001
From: Edoardo Dusi <edo@edoardodusi.com>
Date: Tue, 31 Dec 2024 16:25:28 +0100
Subject: [PATCH] chore: update to dependabot config

---
 .github/dependabot.yml                        | 33 ++++++++++++++++++-
 ...tomerge.yml => dependabot-autoapprove.yml} |  0
 2 files changed, 32 insertions(+), 1 deletion(-)
 rename .github/workflows/{dependabot-automerge.yml => dependabot-autoapprove.yml} (100%)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3e7a93e2..ee8c3182 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,11 +1,42 @@
 version: 2
 updates:
+  # First rule for storyblok packages - allows all updates
   - package-ecosystem: npm
     directory: /
     schedule:
       interval: daily
-      time: '03:00'
+      time: '04:00'
     commit-message:
       prefix: fix
       prefix-development: chore
       include: scope
+    labels:
+      - dependencies
+    allow:
+      - dependency-name: "storyblok*"
+
+  # Second rule for all other packages - patch updates only
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: daily
+      time: '04:00'
+    commit-message:
+      prefix: fix
+      prefix-development: chore
+      include: scope
+    labels:
+      - dependencies
+    groups:
+      security-updates:
+        patterns:
+          - '*'
+        exclude-patterns:
+          - 'storyblok*'
+        update-types:
+          - patch
+    ignore:
+      - dependency-name: '*'
+        update-types:
+          - version-update:semver-minor
+          - version-update:semver-major
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-autoapprove.yml
similarity index 100%
rename from .github/workflows/dependabot-automerge.yml
rename to .github/workflows/dependabot-autoapprove.yml