Skip to content
This repository was archived by the owner on Apr 20, 2026. It is now read-only.

chore(deps): add 7 day dependency cooldown#369

Merged
zerosnacks merged 1 commit intomainfrom
zerosnacks/dependabot-cooldown
Apr 13, 2026
Merged

chore(deps): add 7 day dependency cooldown#369
zerosnacks merged 1 commit intomainfrom
zerosnacks/dependabot-cooldown

Conversation

@decofe
Copy link
Copy Markdown
Contributor

@decofe decofe commented Apr 13, 2026

Adds a 7 day cooldown to Dependabot version updates. This delays PRs for newly released dependency versions until they are at least 7 days old, reducing noise and exposure to supply chain attacks.

Security updates bypass the cooldown and are unaffected.

Prompted by: zerosnacks

Co-authored-by: zerosnacks <95942363+zerosnacks@users.noreply.github.com>
Amp-Thread-ID: https://ampcode.com/threads/T-019d8715-2406-741e-9104-f2eed109d3a1
@zerosnacks zerosnacks enabled auto-merge (squash) April 13, 2026 13:48
@zerosnacks zerosnacks merged commit d19a5e6 into main Apr 13, 2026
18 checks passed
@zerosnacks zerosnacks deleted the zerosnacks/dependabot-cooldown branch April 13, 2026 13:51
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants