Skip to content

chore(ci): set dependabot cooldown for github-actions - #12662

Open
oc-tmueller wants to merge 1 commit into
masterfrom
chore/dependabot-cooldown-github-actions
Open

oc-tmueller wants to merge 1 commit into
masterfrom
chore/dependabot-cooldown-github-actions

Conversation

@oc-tmueller

Copy link
Copy Markdown

A 7-day cooldown is already imposed before a newly-released GitHub action may be used: new entries in the org's Actions allowlist have to age 7 days before they are accepted. Dependabot's default cooldown is only 3 days, so it opens PRs for new GitHub action releases before they are allowed, and the CI fails.

This sets a 7-day cooldown for github-actions updates in the Dependabot config, the same change as owncloud/core#41905.

dependabot/dependabot-core#15368 announces the Dependabot default cooldown period.

🤖 Generated with Claude Code

A 7-day cooldown is already imposed before a newly-released GitHub
action may be used, but Dependabot's default cooldown is only 3 days,
so it raises github-actions PRs whose CI fails. Same change as
owncloud/core#41905.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
@oc-tmueller
oc-tmueller requested a review from a team as a code owner October 16, 2026 15:34
@update-docs

update-docs Bot commented Oct 16, 2026

Copy link
Copy Markdown

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@CLAassistant

CLAassistant commented Oct 16, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@oc-tmueller
oc-tmueller deleted the chore/dependabot-cooldown-github-actions branch October 19, 2026 07:45
@oc-tmueller
oc-tmueller restored the chore/dependabot-cooldown-github-actions branch October 19, 2026 07:57
@oc-tmueller oc-tmueller reopened this Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants