Skip to content

Commit 277d87c

Browse files
ci: Add Dependabot version-update cooldown (#553)
This pull request was auto generated by the LaunchDarkly Github Standards automation platform. * Ensure every entry under `updates` in `.github/dependabot.yml` declares a cooldown of at least 7 days (default-days). * Add entries for detected package ecosystems that were not yet tracked by Dependabot. Cooldown applies only to version updates; security updates bypass it, so critical CVE fixes are never delayed. Ref: SEC-8058. <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > CI/automation-only change with no runtime code; only affects how and when Dependabot opens dependency PRs. > > **Overview** > Introduces **`.github/dependabot.yml`** to turn on automated dependency updates across the repo. > > Each `updates` entry uses a **weekly** schedule and a **`cooldown.default-days: 7`** so routine version bumps are spaced out. Coverage includes **Docker** (`examples/proxy-validation-test`), **GitHub Actions** (repo root), and **npm** for the listed `libs/*` packages. > > Per the PR intent, cooldown affects version updates only; **security updates are not delayed**. > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 2cc7edd. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup> <!-- /CURSOR_SUMMARY --> Co-authored-by: ld-repository-standards[bot] <113625520+ld-repository-standards[bot]@users.noreply.github.com>
1 parent 505ee46 commit 277d87c

1 file changed

Lines changed: 68 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "docker"
4+
directory: "/examples/proxy-validation-test"
5+
schedule:
6+
interval: "weekly"
7+
cooldown:
8+
default-days: 7
9+
- package-ecosystem: "github-actions"
10+
directory: "/"
11+
schedule:
12+
interval: "weekly"
13+
cooldown:
14+
default-days: 7
15+
- package-ecosystem: "npm"
16+
directory: "/libs/client-sdk"
17+
schedule:
18+
interval: "weekly"
19+
cooldown:
20+
default-days: 7
21+
- package-ecosystem: "npm"
22+
directory: "/libs/common"
23+
schedule:
24+
interval: "weekly"
25+
cooldown:
26+
default-days: 7
27+
- package-ecosystem: "npm"
28+
directory: "/libs/internal"
29+
schedule:
30+
interval: "weekly"
31+
cooldown:
32+
default-days: 7
33+
- package-ecosystem: "npm"
34+
directory: "/libs/networking"
35+
schedule:
36+
interval: "weekly"
37+
cooldown:
38+
default-days: 7
39+
- package-ecosystem: "npm"
40+
directory: "/libs/server-sdk"
41+
schedule:
42+
interval: "weekly"
43+
cooldown:
44+
default-days: 7
45+
- package-ecosystem: "npm"
46+
directory: "/libs/server-sdk-dynamodb-source"
47+
schedule:
48+
interval: "weekly"
49+
cooldown:
50+
default-days: 7
51+
- package-ecosystem: "npm"
52+
directory: "/libs/server-sdk-otel"
53+
schedule:
54+
interval: "weekly"
55+
cooldown:
56+
default-days: 7
57+
- package-ecosystem: "npm"
58+
directory: "/libs/server-sdk-redis-source"
59+
schedule:
60+
interval: "weekly"
61+
cooldown:
62+
default-days: 7
63+
- package-ecosystem: "npm"
64+
directory: "/libs/server-sent-events"
65+
schedule:
66+
interval: "weekly"
67+
cooldown:
68+
default-days: 7

0 commit comments

Comments
 (0)