version: 2
updates:
  - package-ecosystem: "npm"
    directory: "/"
    target-branch: "main"
    schedule:
      interval: "monthly"  # version updates are disabled; required field only
    open-pull-requests-limit: 0  # disables version update PRs; does not affect security PRs
    groups:
      security-updates:
        applies-to: security-updates
        patterns:
          - "*"