tools: Update tidy.sh and related config

Author: taiki-e

.github/dependabot.yml

@@ -1,22 +1,24 @@
 version: 2
 updates:
-  - package-ecosystem: cargo # zizmor: ignore[dependabot-cooldown] # Unless dependencies are pinned/locked, the effect is limited.
+  - package-ecosystem: cargo
     directories:
       - /
       # crates with [workspace] table are not recognized by the above 'directory: /'
       - /tests/fixtures/crates/trybuild
       - /tests/fixtures/crates/ui_test
     schedule:
-      interval: daily
+      interval: weekly
+    cooldown:
+      default-days: 14 # Note: Unless dependencies are pinned/locked, the effect is limited.
     commit-message:
       prefix: ''
     labels: []
   - package-ecosystem: github-actions
     directory: /
     schedule:
-      interval: daily
+      interval: weekly
     cooldown:
-      default-days: 7
+      default-days: 14
     commit-message:
       prefix: ''
     labels: []

.github/workflows/ci.yml

@@ -316,7 +316,7 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: zsh {0}
+        shell: zsh {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: matrix.os != 'windows-11-arm'
       - name: Test show-env --csh on csh
@@ -332,7 +332,7 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: bsd-csh {0}
+        shell: bsd-csh {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: startsWith(matrix.os, 'ubuntu') || matrix.os == ''
       - name: Test show-env --csh on tcsh
@@ -349,7 +349,7 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: tcsh {0}
+        shell: tcsh {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: matrix.os != 'windows-11-arm'
       - name: Test show-env --fish
@@ -365,15 +365,15 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: fish {0}
+        shell: fish {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: matrix.os != 'windows-11-arm'
       # Split step and use absolute path to work around https://www.nushell.sh/book/thinking_in_nu.html#example-dynamically-generating-source
       - name: Test show-env --nu (generate env)
         run: |
           cargo llvm-cov show-env --nu | save -f /tmp/env.nu
           cat -- /tmp/env.nu
-        shell: nu {0}
+        shell: nu {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: (!startsWith(matrix.os, 'windows'))
       - name: Test show-env --nu
@@ -388,7 +388,7 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: nu {0}
+        shell: nu {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: (!startsWith(matrix.os, 'windows'))
       - name: Test show-env --xonsh
@@ -404,7 +404,7 @@ jobs:
           cargo build
           cargo run -- 2
           cargo llvm-cov report --fail-under-lines 57
-        shell: xonsh {0}
+        shell: xonsh {0} # zizmor: ignore[misfeature] used for compatibility testing
         working-directory: tests/fixtures/crates/bin_crate
         if: (!startsWith(matrix.os, 'windows'))
 

.github/zizmor.yml

@@ -3,6 +3,7 @@
 
 rules:
   anonymous-definition: { disable: true }
+  dependabot-cooldown: { config: { days: 14 } }
   unpinned-uses:
     config:
       policies: