From 3ad439d593e844c3d00547dd9a66238eebece3bd Mon Sep 17 00:00:00 2001 From: Nick Rolfe Date: Mon, 5 Oct 2026 11:01:50 +0100 Subject: [PATCH] Update Dependabot and npm cooldowns from 3 to 7 days --- .github/dependabot.yml | 6 +++--- extensions/ql-vscode/.npmrc | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f47f3ad7540..266267e0f21 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ updates: - package-ecosystem: "npm" directory: "extensions/ql-vscode" cooldown: - default-days: 3 + default-days: 7 schedule: interval: "weekly" day: "thursday" # Thursday is arbitrary @@ -35,7 +35,7 @@ updates: - package-ecosystem: "github-actions" directory: "/" cooldown: - default-days: 3 + default-days: 7 schedule: interval: "weekly" day: "thursday" # Thursday is arbitrary @@ -48,7 +48,7 @@ updates: - package-ecosystem: docker directory: "extensions/ql-vscode/test/e2e/docker" cooldown: - default-days: 3 + default-days: 7 schedule: interval: "weekly" day: "thursday" # Thursday is arbitrary diff --git a/extensions/ql-vscode/.npmrc b/extensions/ql-vscode/.npmrc index 66c96ebcb24..9d97aebec8a 100644 --- a/extensions/ql-vscode/.npmrc +++ b/extensions/ql-vscode/.npmrc @@ -1,4 +1,4 @@ # Storybook requires this option to be set. See https://github.com/storybookjs/storybook/issues/18298 legacy-peer-deps=true -# Supply chain security: require packages to be at least 3 days old before install -min-release-age=3 +# Supply chain security: require packages to be at least 7 days old before install +min-release-age=7