From bf739a5cd61007c94f5200ca0a83a3828daebdc3 Mon Sep 17 00:00:00 2001 From: bschnurr Date: Wed, 7 Oct 2026 11:35:38 -0700 Subject: [PATCH 1/2] Use a 14-day Dependabot cooldown Delay dependency updates beyond the highest-risk window immediately after release. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: ce6aeb0a-6210-4716-8a84-2f3e7555625f --- .github/dependabot.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 550676d..6d56fdf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,6 +15,9 @@ updates: - 'minor' - 'patch' open-pull-requests-limit: 10 + cooldown: + # Delay updates beyond the highest-risk window after a release. + default-days: 14 ignore: - dependency-name: '@types/vscode' - dependency-name: '@types/node' @@ -28,6 +31,9 @@ updates: schedule: interval: 'weekly' open-pull-requests-limit: 10 + cooldown: + # Delay updates beyond the highest-risk window after a release. + default-days: 14 groups: pip-minor-patch: patterns: @@ -53,4 +59,5 @@ updates: - 'minor' - 'patch' cooldown: - default-days: 7 + # Delay updates beyond the highest-risk window after a release. + default-days: 14 From 196743dd3f86e42e77e273432ef770b52e410442 Mon Sep 17 00:00:00 2001 From: bschnurr Date: Wed, 7 Oct 2026 12:03:52 -0700 Subject: [PATCH 2/2] Group all Dependabot updates Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: ce6aeb0a-6210-4716-8a84-2f3e7555625f --- .github/dependabot.yml | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6d56fdf..442799b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,12 +8,9 @@ updates: schedule: interval: 'weekly' groups: - npm-minor-patch: + all-npm: patterns: - '*' - update-types: - - 'minor' - - 'patch' open-pull-requests-limit: 10 cooldown: # Delay updates beyond the highest-risk window after a release. @@ -35,12 +32,9 @@ updates: # Delay updates beyond the highest-risk window after a release. default-days: 14 groups: - pip-minor-patch: + all-pip: patterns: - '*' - update-types: - - 'minor' - - 'patch' - package-ecosystem: 'github-actions' labels: @@ -52,12 +46,9 @@ updates: interval: 'weekly' open-pull-requests-limit: 10 groups: - github-actions-minor-patch: + all-actions: patterns: - '*' - update-types: - - 'minor' - - 'patch' cooldown: # Delay updates beyond the highest-risk window after a release. default-days: 14