From b2e514a8aa1df3d7619b5a753656a917f120abd3 Mon Sep 17 00:00:00 2001
From: Ferdinand Thiessen <opensource@fthiessen.de>
Date: Wed, 23 Apr 2025 11:55:17 +0200
Subject: [PATCH] ci: drop stable29 from dependabot and include `vendor-bin`

Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
---
 .github/dependabot.yml | 44 ++++++++++++++++--------------------------
 1 file changed, 17 insertions(+), 27 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 237ec0d4b..d92095cb4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,18 +1,20 @@
 version: 2
 updates:
-- package-ecosystem: composer
+- package-ecosystem: "github-actions"
   directory: "/"
   schedule:
     interval: weekly
-    day: saturday
-    time: "03:00"
+    day: sunday
+    time: "06:00"
     timezone: Europe/Paris
-  labels:
-    - "3. to review"
-    - "dependencies"
 
-- package-ecosystem: npm
-  directory: "/"
+- package-ecosystem: composer
+  versioning-strategy: increase
+  directories:
+    - "/"
+    - "/vendor-bin/cs-fixer"
+    - "/vendor-bin/phpunit"
+    - "/vendor-bin/psalm"
   schedule:
     interval: weekly
     day: saturday
@@ -22,59 +24,47 @@ updates:
     - "3. to review"
     - "dependencies"
 
-# Main stableXX npm
 - package-ecosystem: npm
+  versioning-strategy: increase
   directory: "/"
   schedule:
     interval: weekly
     day: saturday
     time: "03:00"
     timezone: Europe/Paris
-  target-branch: stable31
   labels:
     - "3. to review"
     - "dependencies"
-  ignore:
-    # ignore all GitHub linguist patch updates
-    - dependency-name: "*"
-      update-types: ["version-update:semver-major", "version-update:semver-minor"]
 
+# Main stableXX npm
 - package-ecosystem: npm
+  target-branch: stable31
   directory: "/"
   schedule:
     interval: weekly
     day: saturday
     time: "03:00"
     timezone: Europe/Paris
-  target-branch: stable30
   labels:
     - "3. to review"
     - "dependencies"
   ignore:
-    # ignore all GitHub linguist patch updates
+    # do not do breaking changes on stable branches
     - dependency-name: "*"
-      update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      update-types: ["version-update:semver-major"]
 
 - package-ecosystem: npm
+  target-branch: stable30
   directory: "/"
   schedule:
     interval: weekly
     day: saturday
     time: "03:00"
     timezone: Europe/Paris
-  target-branch: stable29
   labels:
     - "3. to review"
     - "dependencies"
   ignore:
-    # ignore all GitHub linguist patch updates
+    # only do patch releases on old stable
     - dependency-name: "*"
       update-types: ["version-update:semver-major", "version-update:semver-minor"]
-
-- package-ecosystem: "github-actions"
-  directory: "/"
-  schedule:
-    interval: weekly
-    day: sunday
-    time: "09:00"
-    timezone: Europe/Paris