-
Notifications
You must be signed in to change notification settings - Fork 0
Add cooldown configuration to dependabot config for Zizmor compliance #16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…imit Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
|
@copilot I am thinking more what is mentioned here on this page under the section for |
Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
You're absolutely right! I've updated the configuration to use the proper |
|
@copilot Lets also set the schedule to be daily. |
Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
|
@copilot Zizmor suggests 7 days. Lets use that. |
Co-authored-by: MariusStorhaug <17722253+MariusStorhaug@users.noreply.github.com>
This pull request updates the Dependabot configuration to increase the frequency of dependency update checks and introduces a cooldown period to help manage update noise.
Dependabot configuration changes:
.github/dependabot.yml.cooldownsetting withdefault-days: 7to limit how often Dependabot will open new pull requests for the same dependency.