From 0193661b899252636c22441b811d648f37500d76 Mon Sep 17 00:00:00 2001 From: Matteo Madeddu Date: Thu, 2 Jul 2026 10:59:07 +0200 Subject: [PATCH 1/2] chore: enable Dependabot for github-actions daily 04:00 UTC Follow-up to OPE#1020: add a Dependabot config so it proposes bump PRs for the GitHub Actions dependencies bumped in OPE#1020. Scope is the github-actions ecosystem only, scheduled daily at 04:00 Etc/UTC. Reference: ope1020-dependabot Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..8a82827 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + time: "04:00" + timezone: "Etc/UTC" From 6e9664edc78e02c1cfc0d889f0ac597c2982c13d Mon Sep 17 00:00:00 2001 From: Matteo Madeddu Date: Thu, 2 Jul 2026 11:08:37 +0200 Subject: [PATCH 2/2] chore: add 2-day Dependabot cooldown (OPE#1020) Add a 2-day release cooldown to the github-actions update entry so Dependabot won't propose versions released less than 2 days ago. Task: ope1020-dependabot Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8a82827..5a686d7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,3 +6,5 @@ updates: interval: "daily" time: "04:00" timezone: "Etc/UTC" + cooldown: + default-days: 2