From 8d8284b8b8549c85e38655a5b1578765e37fb849 Mon Sep 17 00:00:00 2001 From: Jakub Stejskal Date: Fri, 13 Nov 2026 14:58:04 +0100 Subject: [PATCH] Add security actions and cooldown to Dependabot config Signed-off-by: Jakub Stejskal --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5aeb710..a915d03 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,9 +6,13 @@ updates: - "/" - "/.github/actions/build/*" - "/.github/actions/dependencies/*" + - "/.github/actions/security/*" - "/.github/actions/utils/*" schedule: interval: "weekly" + # Wait a week after a release so a compromised version is likely caught before we pick it up + cooldown: + default-days: 7 groups: all-dependencies: patterns: