From d0d3851a19ff83bb92e98f9efb21d9a12b93a02b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Wed, 1 Apr 2026 08:28:22 +0000
Subject: [PATCH] Update from template: X0000-updateDependabotSettings

---
 .github/dependabot.yml | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6c9e89c..f07caed 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,22 +1,29 @@
+# Dependabot configuration
+# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately.
+# Note: Cooldown is not supported for the github-actions ecosystem.
+# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
 version: 2
 updates:
-  - package-ecosystem: npm
+
+  - package-ecosystem: 'npm'
     directory: '/'
     schedule:
-      interval: monthly
+      interval: 'monthly'
       time: '04:00'
-      timezone: Europe/Berlin
+      timezone: 'Europe/Berlin'
     open-pull-requests-limit: 5
     assignees:
-      - PLCHome
-    versioning-strategy: increase
+      - 'PLCHome'
+    versioning-strategy: 'increase'
+    cooldown:
+      default-days: 7
 
-  - package-ecosystem: github-actions
+  - package-ecosystem: 'github-actions'
     directory: '/'
     schedule:
-      interval: monthly
+      interval: 'monthly'
       time: '04:00'
-      timezone: Europe/Berlin
+      timezone: 'Europe/Berlin'
     open-pull-requests-limit: 5
     assignees:
-      - PLCHome
+      - 'PLCHome'