From 67763613216b96ab43f47da135a1cd7f7e468e39 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 1 Apr 2026 11:31:05 +0000 Subject: [PATCH] Update from template: X0000-updateDependabotSettings --- .github/dependabot.yml | 29 +++++++++++++++++------------ 1 file changed, 17 insertions(+), 12 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 68c7634..b767c8e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,20 +1,25 @@ -# Dependabot will run on day 16 of each month at 02:50 (Europe/Berlin timezone) +# Dependabot configuration +# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately. +# Note: Cooldown is not supported for the github-actions ecosystem. +# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference version: 2 updates: - - package-ecosystem: "github-actions" - directory: "/" + - package-ecosystem: 'github-actions' + directory: '/' schedule: - interval: "cron" - timezone: "Europe/Berlin" - cronjob: "50 2 16 * *" + interval: 'cron' + timezone: 'Europe/Berlin' + cronjob: '50 2 16 * *' open-pull-requests-limit: 15 - - package-ecosystem: "npm" - directory: "/" + - package-ecosystem: 'npm' + directory: '/' schedule: - interval: "cron" - timezone: "Europe/Berlin" - cronjob: "50 2 16 * *" + interval: 'cron' + timezone: 'Europe/Berlin' + cronjob: '50 2 16 * *' open-pull-requests-limit: 20 - versioning-strategy: "increase" + versioning-strategy: 'increase' + cooldown: + default-days: 7