From 1ad2c3dd8473b012eb64f46b2539d92431124d9d Mon Sep 17 00:00:00 2001
From: Arthit Suriyawongkul <arthit@gmail.com>
Date: Wed, 14 Jan 2026 19:54:14 +0000
Subject: [PATCH] Add cooldown period for dependabot

Read about cooldown periods here: https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
---
 .github/dependabot.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d8167c710..50d62f953 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -2,14 +2,21 @@
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+# https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
+# Read about cooldown periods here:
+# https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
 
 version: 2
 updates:
   - package-ecosystem: "github-actions"
+    cooldown:
+      default-days: 7
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
   - package-ecosystem: "pip"
+    cooldown:
+      default-days: 7
     directory: "/"
     schedule:
       interval: "weekly"