Skip to content
This repository was archived by the owner on Apr 20, 2026. It is now read-only.

chore(deps): add 7 day dependency cooldown - #131

Merged
zerosnacks merged 1 commit into
mainfrom
zerosnacks/dependabot-cooldown
Apr 13, 2026
Merged

chore(deps): add 7 day dependency cooldown#131
zerosnacks merged 1 commit into
mainfrom
zerosnacks/dependabot-cooldown

Conversation

@decofe

@decofe decofe commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

Adds a 7 day cooldown to Dependabot version updates. This delays PRs for newly released dependency versions until they are at least 7 days old, reducing noise and exposure to supply chain attacks.

Security updates bypass the cooldown and are unaffected.

Prompted by: zerosnacks

Co-authored-by: zerosnacks <95942363+zerosnacks@users.noreply.github.com>
Amp-Thread-ID: https://ampcode.com/threads/T-019d8715-2406-741e-9104-f2eed109d3a1
@zerosnacks
zerosnacks merged commit 3e5d9ca into main Apr 13, 2026
17 checks passed
@zerosnacks
zerosnacks deleted the zerosnacks/dependabot-cooldown branch April 13, 2026 13:49
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants