Delay automatic dependency updates to allow time for discovery of regressions or supply-chain compromises in newly released versions. See: https://docs.zizmor.sh/audits/#dependabot-cooldown
12 lines
240 B
YAML
12 lines
240 B
YAML
# SPDX-License-Identifier: Apache-2.0
|
|
# SPDX-FileCopyrightText: 2021 The Elixir Team
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|