Add cooldown period to Dependabot update schedules (PaloAltoNetworks#1193)

* Add cooldown period to Dependabot update schedules

Adds a 7-day cooldown to both npm and github-actions ecosystems to
reduce PR noise from rapid successive version bumps.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add .claude/ to .gitignore

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add workflow to clean up Firebase preview channels on PR close

Automatically deletes the Firebase Hosting preview channel when a PR
is merged or closed, preventing channel quota exhaustion.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Harden cleanup-preview workflow

Add environment gate for WIF secrets and replace npx firebase-tools
with a direct REST API call to eliminate npm supply chain surface.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: sserrata

.github/dependabot.yml

@@ -9,8 +9,12 @@ updates:
         patterns:
           - "react"
           - "react-dom"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7

.github/workflows/cleanup-preview.yml

@@ -0,0 +1,33 @@
+name: "Cleanup Preview"
+
+on:
+  pull_request_target:
+    types: [closed]
+
+permissions: {}
+
+jobs:
+  cleanup:
+    if: github.repository == 'PaloAltoNetworks/pan.dev'
+    name: Delete preview channel
+    runs-on: ubuntu-latest
+    environment: preview
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Authenticate to Google Cloud
+        id: auth
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
+        with:
+          workload_identity_provider: ${{ secrets.WIF_PROVIDER }}
+          service_account: ${{ secrets.WIF_SERVICE_ACCOUNT }}
+
+      - name: Delete Firebase preview channel
+        run: |
+          curl -sf -X DELETE \
+            -H "Authorization: Bearer $(gcloud auth print-access-token)" \
+            "https://firebasehosting.googleapis.com/v1beta1/sites/pan-dev-f1b58/channels/pr${PR_NUMBER}" \
+            || echo "Channel pr${PR_NUMBER} not found or already deleted"
+        env:
+          PR_NUMBER: ${{ github.event.number }}

.gitignore

@@ -34,3 +34,6 @@ src/**/feeds.json
 # playwright
 .playwright-storage.json
 .pw-user-data/
+
+# claude code
+.claude/