From 95681aa7ea77a73e1a99760247803d952f58a854 Mon Sep 17 00:00:00 2001 From: Alex Soffronow-Pagonidis Date: Fri, 12 Jun 2026 14:22:10 +0200 Subject: [PATCH 1/2] ci: add dependabot config with a 7-day cooldown on npm updates Weekly npm and github-actions update PRs. npm uses a 7-day cooldown so a freshly published release isn't pulled in immediately (gives time for any quickly-yanked/broken release to surface before we bump). Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..5daaa17 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,12 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: / + schedule: + interval: weekly + cooldown: + default-days: 7 + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly From 3ce8452b46e98534a507bf00a4a100efbe09bfec Mon Sep 17 00:00:00 2001 From: Alex Soffronow-Pagonidis Date: Fri, 12 Jun 2026 14:23:25 +0200 Subject: [PATCH 2/2] ci: apply the 7-day cooldown to github-actions updates too Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5daaa17..dc40cb9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,3 +10,5 @@ updates: directory: / schedule: interval: weekly + cooldown: + default-days: 7