Update from template: X0000-updateDependabotSettings (#375)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Matthias Kleine <github.com9@emailu.de>

Author: 3 people

.github/dependabot.yml

@@ -1,4 +1,7 @@
-# Dependabot will run on day 7 of each month at 02:21 (Europe/Berlin timezone)
+# Dependabot configuration
+# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately.
+# Note: Cooldown is not supported for the github-actions ecosystem.
+# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
 version: 2
 updates:
 
@@ -24,3 +27,5 @@ updates:
       - dependency-name: '@types/node'
         update-types:
           - 'version-update:semver-major'
+    cooldown:
+      default-days: 7