version: 2
updates:
  - package-ecosystem: 'npm'
    directory: '/app/'
    schedule:
      interval: 'weekly'
    allow:
      # Allow both direct and indirect updates for production packages.
      # Ignores packages listed in devDependencies
      - dependency-type: 'production'
    # exclude dependabot version updates
    open-pull-requests-limit: 0