Skip to content

chore: enable Dependabot version updates with a 7-day cooldown - #15

Merged
maurycy merged 1 commit into
mainfrom
maurycy/dev-13943-enable-dependabot-with-a-7-day-cooldown-in-every-active
Oct 22, 2026
Merged

maurycy merged 1 commit into
mainfrom
maurycy/dev-13943-enable-dependabot-with-a-7-day-cooldown-in-every-active

Conversation

@maurycy

@maurycy maurycy commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Adds .github/dependabot.yml with weekly version updates for the ecosystems this repo uses. Minor and patch bumps are grouped into one PR per ecosystem, and cooldown: default-days: 7 skips releases younger than a week, so a compromised fresh release has time to be caught upstream before it lands here. Security updates are unaffected by the cooldown.

Part of https://linear.app/terminal49/issue/DEV-13943

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.

@maurycy maurycy self-assigned this Oct 22, 2026
@maurycy
maurycy requested a review from dodeja October 22, 2026 21:47
@maurycy
maurycy merged commit b99dec1 into main Oct 22, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant