security: Delay dependabot updates [TAROT-3707] (#2647)

afsmeira · web-flow · commit a902bd002959 · 2026-05-04T13:07:58.000+01:00
security: Delay dependabot updates

7 days should be enough when most malicious packages are patched within 24 hours.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,9 +6,13 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
 
   # Maintain dependencies for pip
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
