From 4e8e4c4b0e796436661ae102813cd54854b0ccb2 Mon Sep 17 00:00:00 2001 From: Dariusz Frankiewicz <5229380+dariusz-f@users.noreply.github.com> Date: Thu, 4 Dec 2025 10:40:49 +0100 Subject: [PATCH] ci: Add dependency cooldown Use dependency cooldown to mitigate supply chain attacks. Signed-off-by: Dariusz Frankiewicz <5229380+dariusz-f@users.noreply.github.com> --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ca79ca5..927a149 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,5 @@ updates: directory: / schedule: interval: weekly + cooldown: + default-days: 14