Skip to content

chore: add dependabot cooldown configuration#472

Merged
bashofmann merged 1 commit into
mainfrom
chore/dependabot-cooldown
Jul 7, 2026
Merged

chore: add dependabot cooldown configuration#472
bashofmann merged 1 commit into
mainfrom
chore/dependabot-cooldown

Conversation

@andres-qd

Copy link
Copy Markdown
Contributor

Summary

  • Adds cooldown: default-days: 7 to all Dependabot update entries
  • Delays version updates by 7 days after release to reduce risk of regressions and supply chain attacks
  • Does not affect security updates (those still come immediately)

Ref: https://docs.zizmor.sh/audits/#dependabot-cooldown

@bashofmann
bashofmann merged commit d23e68a into main Jul 7, 2026
4 checks passed
@bashofmann
bashofmann deleted the chore/dependabot-cooldown branch July 7, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants