Mirrors/chatmail-core
1
0
Fork 0
mirror of https://github.com/chatmail/core.git synced 2026-05-02 21:06:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

ci: set 7 days cooldown on Dependabot updates

Browse Source 
This fixes the warning
<https://docs.zizmor.sh/audits/#dependabot-cooldown>
and avoids updating to freshly published dependencies
that are more likely to be unpublished.
This commit is contained in:
link2xt
2025-10-15 16:52:05 +00:00
committed by l
parent 187d913f84
commit 9ceceebdc3
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/dependabot.yml vendored
View File

@@ -7,6 +7,8 @@ updates:
commit-message: commit-message:
prefix: "chore(cargo)" prefix: "chore(cargo)"
open-pull-requests-limit: 50 open-pull-requests-limit: 50
cooldown:
default-days: 7
# Keep GitHub Actions up to date. # Keep GitHub Actions up to date.
# <https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot> # <https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot>
@@ -14,3 +16,5 @@ updates:
directory: "/" directory: "/"
schedule: schedule:
interval: "weekly" interval: "weekly"
cooldown:
default-days: 7