From 7026a1d66466ae6244fd1c43f77460235cfd31e9 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 1 Apr 2026 10:16:09 +0000 Subject: [PATCH] Update from template: X0000-updateDependabotSettings --- .github/dependabot.yml | 29 +++++++++++++++++------------ 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index faed390..3237455 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,20 +1,25 @@ -# Dependabot will run on day 15 of each month at 02:44 (Europe/Berlin timezone) +# Dependabot configuration +# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately. +# Note: Cooldown is not supported for the github-actions ecosystem. +# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference version: 2 updates: - - package-ecosystem: "github-actions" - directory: "/" + - package-ecosystem: 'github-actions' + directory: '/' schedule: - interval: "cron" - timezone: "Europe/Berlin" - cronjob: "44 2 15 * *" + interval: 'cron' + timezone: 'Europe/Berlin' + cronjob: '44 2 15 * *' open-pull-requests-limit: 15 - - package-ecosystem: "npm" - directory: "/" + - package-ecosystem: 'npm' + directory: '/' schedule: - interval: "cron" - timezone: "Europe/Berlin" - cronjob: "44 2 15 * *" + interval: 'cron' + timezone: 'Europe/Berlin' + cronjob: '44 2 15 * *' open-pull-requests-limit: 15 - versioning-strategy: "increase" + versioning-strategy: 'increase' + cooldown: + default-days: 7