From d3ef2489b01ca7fd3b76c6c25774dea9b6035f22 Mon Sep 17 00:00:00 2001 From: zaniebot Date: Tue, 18 Aug 2026 12:08:54 -0500 Subject: [PATCH] Add a 30-day Dependabot cooldown (#400) The repository has no explicit Dependabot cooldown, so routine updates do not follow the 30-day policy used by `setup-uv`. Add `cooldown.default-days: 30` for npm and GitHub Actions while retaining the daily schedule. Dependabot security updates remain outside the cooldown. Co-authored-by: zaniebot <242828183+zaniebot@users.noreply.github.com> --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bb85b6f..cc12f3b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,8 +4,12 @@ updates: directory: / schedule: interval: daily + cooldown: + default-days: 30 - package-ecosystem: npm directory: / schedule: interval: daily + cooldown: + default-days: 30