Merge pull request #390 from Staffbase/ci-1108/add-dependabot-cooldown

timdittler · web-flow · commit 7e89bab74e40 · 2026-02-06T16:01:18.000+01:00
CI-1108: Add Dependabot cooldown to mitigate supply-chain attacks
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,6 +6,8 @@ updates:
       interval: "weekly"
       time: "09:00"
       timezone: "Europe/Berlin"
+    cooldown:
+      default-days: 7
     open-pull-requests-limit: 5
     ignore:
       - dependency-name: "*"
