Skip to content

chore: add dependabot cooldown configuration - #126

Merged
Anush008 merged 1 commit into
mainfrom
chore/dependabot-cooldown
Jun 23, 2026
Merged

chore: add dependabot cooldown configuration#126
Anush008 merged 1 commit into
mainfrom
chore/dependabot-cooldown

Conversation

@andres-qd

Copy link
Copy Markdown
Contributor

Summary

  • Adds cooldown: default-days: 7 to all Dependabot update entries
  • Delays version updates by 7 days after release to reduce risk of regressions and supply chain attacks
  • Does not affect security updates (those still come immediately)

Ref: https://docs.zizmor.sh/audits/#dependabot-cooldown

@Anush008
Anush008 merged commit 4b16783 into main Jun 23, 2026
6 checks passed
@russcam
russcam deleted the chore/dependabot-cooldown branch July 11, 2026 04:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants