Skip to content

Commit 515657f

Browse files
committed
chore(deps): update Dependabot schedule to daily at 8am
1 parent bf8ffdb commit 515657f

2 files changed

Lines changed: 8 additions & 11 deletions

File tree

.github/dependabot.yml

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
# https://docs.github.com/en/code-security/dependabot/configuration-options-for-dependency-updates
1515
#
1616
# Security Hardened Defaults:
17-
#Weekly cadence (Monday 09:00 America/New_York) – align with CVE dump cycle.
17+
#Daily cadence (08:00 America/New_York) – align with CVE dump cycle.
1818
# • Direct dependencies only – prevents unsolicited transitive churn.
1919
# • PRs labeled, assigned, and target the protected "master" branch.
2020
# • PR titles prefixed with chore(scope): – conventional commits.
@@ -33,9 +33,8 @@ updates:
3333
directory: "/"
3434
target-branch: "master"
3535
schedule:
36-
interval: "weekly"
37-
day: "monday"
38-
time: "09:00"
36+
interval: "daily"
37+
time: "08:00"
3938
timezone: "America/New_York"
4039
allow:
4140
- dependency-type: "direct"
@@ -62,9 +61,8 @@ updates:
6261
directory: "/"
6362
target-branch: "master"
6463
schedule:
65-
interval: "weekly"
66-
day: "monday"
67-
time: "09:15"
64+
interval: "daily"
65+
time: "08:00"
6866
timezone: "America/New_York"
6967
allow:
7068
- dependency-type: "direct"
@@ -85,9 +83,8 @@ updates:
8583
directory: "/"
8684
target-branch: "master"
8785
schedule:
88-
interval: "weekly"
89-
day: "monday"
90-
time: "09:30"
86+
interval: "daily"
87+
time: "08:00"
9188
timezone: "America/New_York"
9289
allow:
9390
- dependency-type: "direct"

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -914,7 +914,7 @@ groups:
914914
* **Uniform Code Style** via [gofumpt](https://github.com/mvdan/gofumpt) plus zero‑noise linting with [golangci‑lint](https://github.com/golangci/golangci-lint).
915915
* **Confidence‑Boosting Tests** with [testify](https://github.com/stretchr/testify), the Go [race detector](https://blog.golang.org/race-detector), crystal‑clear [HTML coverage](https://blog.golang.org/cover) snapshots, and automatic reporting via internal coverage system.
916916
* **Hands‑Free Releases** delivered by [GoReleaser](https://github.com/goreleaser/goreleaser) whenever you create a [new Tag](https://git-scm.com/book/en/v2/Git-Basics-Tagging).
917-
* **Relentless Dependency & Vulnerability Scans** via [Dependabot](https://dependabot.com), [Nancy](https://github.com/sonatype-nexus-community/nancy), and [govulncheck](https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck).
917+
* **Relentless Dependency & Vulnerability Scans** via [Dependabot](https://dependabot.com) (runs daily at 8am to ensure broadcast dependencies are always current), [Nancy](https://github.com/sonatype-nexus-community/nancy), and [govulncheck](https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck).
918918
* **Security Posture by Default** with [CodeQL](https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/about-code-scanning), [OpenSSF Scorecard](https://openssf.org), and secret‑leak detection via [gitleaks](https://github.com/gitleaks/gitleaks).
919919
* **Automatic Syndication** to [pkg.go.dev](https://pkg.go.dev/) on every release for instant godoc visibility.
920920
* **Polished Community Experience** using rich templates for [Issues & PRs](https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-go-broadcastsitory).

0 commit comments

Comments
 (0)