From dda6161dd45f0b6fb045152644d890c925212989 Mon Sep 17 00:00:00 2001
From: Andy Scherzinger <info@andy-scherzinger.de>
Date: Sun, 18 Oct 2026 11:42:56 +0200
Subject: [PATCH] ci: keep stable-0.1 dependencies updated

Dependabot only reads its configuration from the default branch, so
stable-0.1 gets its own entries with target-branch: all GitHub Actions
updates, and npm patch updates only. The npm audit workflow also runs
for stable-0.1.

Assisted-by: Claude Code:claude-opus-5-5
Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
---
 .github/dependabot.yml              | 36 +++++++++++++++++++++++++++++
 .github/workflows/npm-audit-fix.yml |  1 +
 2 files changed, 37 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c550e95a..e197a9ca 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -34,3 +34,39 @@ updates:
     default-days: 4
     exclude:
       - "@nextcloud/*"
+
+# stable-0.1: maintenance branch for Nextcloud 32–35
+- package-ecosystem: "github-actions"
+  directory: ".github/workflows"
+  target-branch: "stable-0.1"
+  commit-message:
+    prefix: "ci"
+    include: "scope"
+  schedule:
+    interval: weekly
+    day: saturday
+    time: "03:00"
+    timezone: Europe/Berlin
+  cooldown:
+    default-days: 4
+
+- package-ecosystem: npm
+  directory: "/"
+  target-branch: "stable-0.1"
+  commit-message:
+    prefix: "build"
+    include: "scope"
+  versioning-strategy: "increase"
+  open-pull-requests-limit: 10
+  schedule:
+    interval: weekly
+    day: saturday
+    time: "03:00"
+    timezone: Europe/Berlin
+  cooldown:
+    default-days: 4
+    exclude:
+      - "@nextcloud/*"
+  ignore:
+    - dependency-name: "*"
+      update-types: ["version-update:semver-major", "version-update:semver-minor"]
diff --git a/.github/workflows/npm-audit-fix.yml b/.github/workflows/npm-audit-fix.yml
index c812ebd7..ec025817 100644
--- a/.github/workflows/npm-audit-fix.yml
+++ b/.github/workflows/npm-audit-fix.yml
@@ -26,6 +26,7 @@ jobs:
       matrix:
         branches:
           - ${{ github.event.repository.default_branch }}
+          - stable-0.1
 
     name: npm-audit-fix-${{ matrix.branches }}