Dependabot: add cooldown#28
Conversation
Signed-off-by: Bradley Reynolds <bradley.reynolds@tailstory.dev>
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
dotforge | a6f2111 | Commit Preview URL Branch Preview URL |
Feb 15 2026, 02:59 AM |
There was a problem hiding this comment.
Pull request overview
Updates the repository’s Dependabot configuration to introduce a cooldown period for dependency update PRs, while also renaming the config file from dependabot.yml to dependabot.yaml.
Changes:
- Replace
.github/dependabot.ymlwith.github/dependabot.yaml. - Add a
cooldownconfiguration (default-days: 7) for both GitHub Actions and npm update rules. - Rename the npm update group (currently to
python-dependencies).
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
.github/dependabot.yml |
Removed old Dependabot configuration file (migrated to .yaml). |
.github/dependabot.yaml |
New Dependabot config including cooldown settings and update grouping. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Signed-off-by: Bradley Reynolds <bradley.reynolds@tailstory.dev>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| cooldown: | ||
| default-days: 7 |
There was a problem hiding this comment.
The cooldown configuration option is not a valid Dependabot configuration field. As of the current Dependabot specification, there is no cooldown option available. Valid configuration options include schedule, open-pull-requests-limit, reviewers, assignees, labels, milestone, commit-message, rebase-strategy, ignore, allow, groups, and registries, but not cooldown. This will cause the Dependabot configuration to fail validation. If you want to control the frequency of updates, use the schedule.interval option (which is already set to "monthly") or open-pull-requests-limit to limit concurrent PRs.
| cooldown: | ||
| default-days: 7 |
There was a problem hiding this comment.
The cooldown configuration option is not a valid Dependabot configuration field. As of the current Dependabot specification, there is no cooldown option available. Valid configuration options include schedule, open-pull-requests-limit, reviewers, assignees, labels, milestone, commit-message, rebase-strategy, ignore, allow, groups, and registries, but not cooldown. This will cause the Dependabot configuration to fail validation. If you want to control the frequency of updates, use the schedule.interval option (which is already set to "monthly") or open-pull-requests-limit to limit concurrent PRs.
No description provided.