Skip to content

🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
MariusStorhaug wants to merge 1 commit into
base: main
Choose a base branch
from
+8 −24
Open

🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,4 +11,6 @@ updates:
- dependencies
- github-actions
schedule:
interval: weekly
interval: daily
cooldown:
default-days: 7
Comment on lines +15 to +16
Copy link

Copilot AI Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The cooldown configuration option is not a valid Dependabot configuration setting. According to the GitHub Dependabot documentation (https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file), the valid configuration options for the schedule section are interval, day, time, and timezone. The cooldown option does not exist in the official Dependabot configuration schema.

If the goal is to delay updates after a dependency release, this cannot be achieved through Dependabot's native configuration. Consider alternative approaches such as:

  1. Using a weekly schedule (the original configuration) to naturally provide time between updates
  2. Implementing custom workflows with delay logic
  3. Using label-based filtering to manually control when updates are merged
Suggested change
cooldown:
default-days: 7

Copilot uses AI. Check for mistakes.
18 changes: 0 additions & 18 deletions .github/release.yml
View file
Open in desktop

This file was deleted.

2 changes: 1 addition & 1 deletion .github/workflows/Action-Test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
name: '${{ matrix.os }} - [${{ matrix.version }}]'
steps:
- name: Checkout repo
uses: actions/checkout@v6
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Action-Test
uses: ./
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/Auto-Release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,9 +26,9 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v6
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Auto-Release
uses: PSModule/Auto-Release@v1
uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1.9.5
env:
GITHUB_TOKEN: ${{ github.token }}
4 changes: 2 additions & 2 deletions .github/workflows/Linter.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repo
uses: actions/checkout@v6
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0

- name: Lint code base
uses: super-linter/super-linter@latest
uses: super-linter/super-linter@d5b0a2ab116623730dd094f15ddc1b6b25bf7b99 # v8.3.2
Comment on lines +22 to +27
Copy link

Copilot AI Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR includes multiple workflow updates that pin GitHub Actions to specific commit SHAs, but these changes are not mentioned in the PR description. The PR description only mentions changes to the Dependabot configuration. Consider either:

  1. Updating the PR description to document all changes including the workflow updates
  2. Splitting these changes into a separate PR focused on dependency updates

The undocumented changes include pinning actions/checkout, super-linter/super-linter, and PSModule/Auto-Release to specific versions.

Copilot uses AI. Check for mistakes.
env:
GITHUB_TOKEN: ${{ github.token }}
VALIDATE_JSON_PRETTIER: false
Expand Down