cpython/.github/dependabot.yml at main · python/cpython · GitHub

28 lines (28 loc) · 761 Bytes

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

version: 2

updates:

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "monthly"

labels:

- "skip issue"

- "skip news"

ignore:

- dependency-name: "*"

update-types:

- "version-update:semver-minor"

- "version-update:semver-patch"

cooldown:

# https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

# Cooldowns protect against supply chain attacks by avoiding the

# highest-risk window immediately after new releases.

default-days: 14

- package-ecosystem: "pip"

directory: "/Tools/"

schedule:

interval: "monthly"

labels:

- "skip issue"

- "skip news"

cooldown:

default-days: 14