version: 2
updates:
  - package-ecosystem: "cargo"
    target-branch: "main"
    directory: "/"
    schedule:
      interval: "weekly"

    open-pull-requests-limit: 5

    cooldown:
      default-days: 7

    groups:
      rust-minor-and-patch:
        patterns:
          - "*"
        update-types:
          - "minor"
          - "patch"
    ignore:
      # TODO(#2051): updating this brings considerable breaking changes
      - dependency-name: "rcgen"
      ## Outdated dependencies we cannot upgrade ##
      # Version 0.8.3 requires rustc 1.88
      - dependency-name: "httpmock"
      # This cannot be upgraded because it conflicts the prometheus version required by nearcore
      - dependency-name: "prometheus"
      # TODO(#690): This cannot be upgraded until nearcore does
      - dependency-name: "rocksdb"
      # This version needs to be exactly the same as in `near_sdk::schemars`
      - dependency-name: "schemars"
      # This is deprecated, we should find an alterantive
      - dependency-name: "serde_yaml"
      # TODO(#1907): These dependencies need to be upgraded in tandem
      - dependency-name: "getrandom"
      # TODO(#1907): These dependencies need to be upgraded in tandem
      - dependency-name: "rand"
      # TODO(#1907): These dependencies need to be upgraded in tandem
      - dependency-name: "rand_chacha"
      # TODO(#1907): These dependencies need to be upgraded in tandem
      - dependency-name: "rand_core"
      # Cannot be upgraded until we get MSVR 1.88
      - dependency-name: "time"
      # The crates.io near-* stack must stay mutually consistent and in lockstep
      # with `near-crypto`; bumped manually, not by dependabot.
      - dependency-name: "near-crypto"
      - dependency-name: "near-jsonrpc-client"
      - dependency-name: "near-jsonrpc-primitives"
      - dependency-name: "near-primitives"
      # These are pinned by git tag and bumped manually in lockstep;
      # dependabot misreads the `-rc` pre-release ordering and tries to downgrade them.
      - dependency-name: "near-async"
      - dependency-name: "near-client"
      - dependency-name: "near-config-utils"
      - dependency-name: "near-indexer"
      - dependency-name: "near-indexer-primitives"
      - dependency-name: "near-o11y"
      - dependency-name: "near-store"
      - dependency-name: "near-time"
      - dependency-name: "nearcore"