Add 14 days cooldown period to dependabot

lagru · lagru · commit a286ff1a2c86 · 2025-10-02T13:24:10.000+02:00
This makes dependabot only consider new releases that are older than
14 days. Effectively, this gives the community a chance to catch
security issues.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -5,6 +5,8 @@ updates:
     directory: "/"
     schedule:
       interval: "quarterly"
+    cooldown:
+      default-days: 14
     labels:
       - "devops"
       - "bot"
