Skip to content

Add Dependabot version-update cooldown#18

Open
ld-repository-standards[bot] wants to merge 1 commit into
mainfrom
ld-github-standards/add-dependabot-cooldown
Open

Add Dependabot version-update cooldown#18
ld-repository-standards[bot] wants to merge 1 commit into
mainfrom
ld-github-standards/add-dependabot-cooldown

Conversation

@ld-repository-standards

Copy link
Copy Markdown

This pull request was auto generated by the LaunchDarkly Github Standards automation platform.

  • Ensure every entry under updates in .github/dependabot.yml declares a cooldown of at least 7 days (default-days).
  • Add entries for detected package ecosystems that were not yet tracked by Dependabot.

Cooldown applies only to version updates; security updates bypass it, so critical CVE fixes are never delayed.

Ref: SEC-8058.

@ld-repository-standards ld-repository-standards Bot requested a review from a team June 11, 2026 01:37
@ld-repository-standards ld-repository-standards Bot requested a review from a team as a code owner June 11, 2026 01:37
@ld-repository-standards ld-repository-standards Bot requested a review from a team June 11, 2026 01:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants