Merge pull request #566 from ioBroker-Bot/update-from-template-X0000-updateDependabotSettings-1774989455

[iobroker-bot] Update Dependabot Configuration – Add npm Cooldown

Author: GermanBluefox

.github/dependabot.yml

@@ -1,29 +1,36 @@
-# Dependabot will run on day 18 of each month at 03:46 (Europe/Berlin timezone)
+# Dependabot configuration
+# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately.
+# Note: Cooldown is not supported for the github-actions ecosystem.
+# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
 version: 2
 updates:
 
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "cron"
-      timezone: "Europe/Berlin"
-      cronjob: "46 3 18 * *"
+      interval: 'cron'
+      timezone: 'Europe/Berlin'
+      cronjob: '46 3 18 * *'
     open-pull-requests-limit: 15
 
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "cron"
-      timezone: "Europe/Berlin"
-      cronjob: "46 3 18 * *"
+      interval: 'cron'
+      timezone: 'Europe/Berlin'
+      cronjob: '46 3 18 * *'
     open-pull-requests-limit: 20
-    versioning-strategy: "increase"
+    versioning-strategy: 'increase'
+    cooldown:
+      default-days: 7
 
-  - package-ecosystem: "npm"
-    directory: "/src-admin"
+  - package-ecosystem: 'npm'
+    directory: '/src-admin'
     schedule:
-      interval: "cron"
-      timezone: "Europe/Berlin"
-      cronjob: "46 3 18 * *"
+      interval: 'cron'
+      timezone: 'Europe/Berlin'
+      cronjob: '46 3 18 * *'
     open-pull-requests-limit: 20
-    versioning-strategy: "increase"
+    versioning-strategy: 'increase'
+    cooldown:
+      default-days: 7