Summary

• add a 7-day Dependabot cooldown for the uv update config
• add the same 7-day cooldown for the github-actions update config

Why

This repository's Dependabot configuration opened update PRs daily without any cooldown window. Adding a 7-day cooldown reduces churn from rapid successive version bumps across both configured ecosystems.

Validation

• ruby -e 'require "yaml"; YAML.load_file(".github/dependabot.yml"); puts "yaml ok"'
• git diff --check

Disclaimer: Experimental PR review

Greptile Summary

Adds a 7-day cooldown (default-days: 7) to both the uv and github-actions Dependabot update configurations to reduce noisy daily PRs for rapid successive version bumps. The cooldown key and its default-days parameter are officially supported by Dependabot and the YAML is well-formed.

Confidence Score: 5/5

Safe to merge — valid Dependabot configuration with no functional risks.

The change is a minimal, well-scoped CI configuration update using a documented Dependabot feature. No code logic, security, or data concerns are present.

No files require special attention.

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Dependabot scheduled run - daily] --> B{New version available?}
    B -- No --> C[Skip]
    B -- Yes --> D{Within 7-day cooldown window?}
    D -- Yes --> E[Skip - wait for cooldown to expire]
    D -- No --> F[Open PR for update]
    F --> G[uv ecosystem PR]
    F --> H[github-actions ecosystem PR]

_{Reviews (1): Last reviewed commit: "chore(dependabot): add 7-day cooldown" | Re-trigger Greptile}