chore(dependabot): raise semver-patch cooldown to 5 days [skip ci]

[MusaMisto]

chore(dependabot): raise semver-patch cooldown to 5 days

Patch is the only update class that auto-merges with no human
involved, yet carried the shortest cooldown (1 day, a third of
GitHub's 3-day default). Soak time should scale with how little
scrutiny a bump receives, not with how breaking semver claims it is.

Costs nothing in security terms: cooldown never applies to Dependabot
security updates, which still fire immediately.

Propagated from simplify9/.github (dependabot-templates).

[coderabbitai]

📝 Walkthrough

What changed

• Increased Dependabot semver-patch cooldowns from 1 day to 5 days for NuGet and GitHub Actions updates.
• Security updates remain immediate and are not affected.

Risk

• risk:low
• This change only modifies Dependabot configuration.

Security-sensitive areas

• Dependabot update timing.
• Security update behavior remains unchanged.

Test coverage impact

• No runtime code changed.
• No test changes are required.

Operational concerns

• Patch updates will merge up to four days later.
• Revert the cooldown values to 1 day to roll back this behavior.

Walkthrough

Dependabot cooldowns for NuGet and GitHub Actions patch updates increase from 1 day to 5 days.

Changes

Dependabot cooldown configuration

Layer / File(s)	Summary
Patch-update cooldown policy .github/dependabot.yml	The NuGet and GitHub Actions patch-update cooldowns increase from 1 day to 5 days.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested labels: infra, risk:high

Suggested reviewers: samerzughul

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Linked Issues check	❓ Inconclusive	The context provides no linked issue requirement or issue reference, so this check cannot be evaluated.	Provide the linked issue requirement or issue reference if one is required.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check	✅ Passed	The description directly explains the Dependabot cooldown change and its security-update behavior.
Out of Scope Changes check	✅ Passed	The change is limited to the Dependabot cooldown values described in the objectives.
Title check	✅ Passed	The title clearly identifies the Dependabot semver-patch cooldown change to five days.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}