diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 818207e..5367468 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,6 +9,8 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
     # Only update Wormhole and Squads dependencies
     allow:
       - dependency-name: "@wormhole-foundation/*"
diff --git a/.github/workflows/sdk-type-check.yml b/.github/workflows/sdk-type-check.yml
index a958e67..1ae8e7b 100644
--- a/.github/workflows/sdk-type-check.yml
+++ b/.github/workflows/sdk-type-check.yml
@@ -14,5 +14,4 @@ permissions:
 
 jobs:
   typecheck-latest:
-    uses: wormhole-foundation/workflows/.github/workflows/wormhole-demo-typecheck.yml@main
-    secrets: inherit
+    uses: wormhole-foundation/workflows/.github/workflows/wormhole-demo-typecheck.yml@3d6ccc988ec1949b31751a30845151b979987246 # main