From 100a9efbe40518e6497b69342879a265412f7fe1 Mon Sep 17 00:00:00 2001 From: Lucas Ramos <3140800+lucas-d-ramos@users.noreply.github.com> Date: Tue, 27 Oct 2026 11:31:09 +0100 Subject: [PATCH] deps: Dependabot cooldown 3 days Follows WeMoveEU/dependency-policy#34: Dependabot's version-update cooldown goes from 7 to 3 days. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f4e3f57..f169156 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -17,11 +17,11 @@ updates: time: "03:00" timezone: "Etc/UTC" open-pull-requests-limit: 10 - # A version must be 7 days old before a PR opens — supply-chain gate; most + # A version must be 3 days old before a PR opens — supply-chain gate; most # compromised packages are yanked within 24-72h. Version updates only: # security updates deliberately ignore it. cooldown: - default-days: 7 + default-days: 3 groups: github-actions-minor-patch: update-types: ["minor", "patch"]