version: 2
enable-beta-ecosystems: true
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
    cooldown:
      default-days: 7

  - package-ecosystem: "npm"
    ignore:
      - dependency-name: "@rjsf/*"
      # TODO: remove below entries until React >= 19.0.0
      - dependency-name: "react-icons"
      # JSDOM v30 doesn't play well with Jest v30
      # Source: https://jestjs.io/blog#known-issues
      # GH thread: https://github.com/jsdom/jsdom/issues/3492
      - dependency-name: "jest-environment-jsdom"
      # `@swc/plugin-transform-imports` doesn't work with current Webpack-SWC hybrid setup
      # See https://github.com/apache/superset/pull/37384#issuecomment-3793991389
      # TODO: remove the plugin once Lodash usage has been migrated to a more readily tree-shakeable alternative
      - dependency-name: "@swc/plugin-transform-imports"
      # `just-handlerbars-helpers` library in plugin-chart-handlebars requires `currencyformatter`` to be < 2
      - dependency-name: "currencyformatter.js"
        update-types: ["version-update:semver-major"]
      # TODO: remove below clause once https://github.com/pmmmwh/react-refresh-webpack-plugin/pull/940 lands onto a future release
      # and confirm the issue https://github.com/apache/superset/issues/39600 is fixed
      - dependency-name: "react-checkbox-tree"
        update-types: ["version-update:semver-major"]
      # Babel 8 (7.x -> 8.x) is blocked on the surrounding ecosystem: @emotion/babel-plugin
      # (NodePath#hoist), babel-plugin-jsx-remove-data-test-id (t.jSXOpeningElement), and
      # ts-jest all rely on Babel APIs removed in v8 and have not shipped Babel 8 support.
      # Ignore the coordinated major bump until the ecosystem catches up; it must be done
      # as a single manual upgrade anyway. TODO: remove when Babel 8 support is viable.
      - dependency-name: "@babel/*"
        update-types: ["version-update:semver-major"]
    directory: "/superset-frontend/"
    schedule:
      interval: "daily"
    labels:
      - npm
      - dependabot
    open-pull-requests-limit: 30
    versioning-strategy: increase
    cooldown:
      default-days: 7

  - package-ecosystem: "pip"
    directory: "/"
    open-pull-requests-limit: 10
    # Bump the lower bound to the new version, not just widen the upper
    # bound. Without this, a `sqlglot>=28.10.0, <29` constraint upgraded
    # to `<30` would keep the stale lower bound forever, dragging
    # transitively-resolved versions with it. See #40186 (review thread).
    versioning-strategy: increase
    schedule:
      interval: "weekly"
    labels:
      - pip
      - dependabot
    cooldown:
      default-days: 7

  - package-ecosystem: "npm"
    directory: ".github/actions"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 10
    versioning-strategy: increase
    cooldown:
      default-days: 7

  - package-ecosystem: "npm"
    directory: "/docs/"
    schedule:
      interval: "daily"
    open-pull-requests-limit: 10
    versioning-strategy: increase
    cooldown:
      default-days: 7

  - package-ecosystem: "npm"
    directory: "/superset-websocket/"
    schedule:
      interval: "daily"
    labels:
      - npm
      - dependabot
    versioning-strategy: increase
    cooldown:
      default-days: 7

  - package-ecosystem: "npm"
    directory: "/superset-websocket/utils/client-ws-app/"
    schedule:
      interval: "daily"
    labels:
      - npm
      - dependabot
    open-pull-requests-limit: 10
    versioning-strategy: increase
    cooldown:
      default-days: 7