Skip to content

Set Dependabot's cooldown - #1154

Merged
afritzler merged 1 commit into
ironcore-dev:mainfrom
mkalcok:dependabot-cd
Sep 4, 2026
Merged

Set Dependabot's cooldown#1154
afritzler merged 1 commit into
ironcore-dev:mainfrom
mkalcok:dependabot-cd

Conversation

@mkalcok

@mkalcok mkalcok commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Dependabot won't bump packages to versions that are less than 7 days old.

Summary by CodeRabbit

  • Chores
    • Added a seven-day waiting period before automated dependency update pull requests are opened for Go modules, GitHub Actions, Docker, and npm packages.

Dependabot won't bump packages to versions that are less than 7 days
old.

Signed-off-by: Martin Kalcok <martin.kalcok@sap.com>
@mkalcok
mkalcok requested a review from a team as a code owner September 4, 2026 07:23
@coderabbitai

coderabbitai Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 538774d9-5876-4531-a74c-042f37871c7f

📥 Commits

Reviewing files that changed from the base of the PR and between 36647bf and 364a860.

📒 Files selected for processing (1)
  • .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

Dependabot now applies a seven-day cooldown to Go module, GitHub Actions, Docker, and npm updates.

Changes

Dependabot cooldown configuration

Layer / File(s) Summary
Configure dependency update cooldowns
.github/dependabot.yml
The Go modules, GitHub Actions, Docker, and npm configurations now use a seven-day default cooldown.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 364a8

Dependabot will defer newly released Go, GitHub Actions, Docker, and npm dependency updates by seven days. The configuration change is narrowly scoped and has no remaining merge-readiness risk.

Suggested reviewers: adracus

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description accurately states the change, but it does not use the required template. It omits the "Proposed Changes" section, change bullets, and "Fixes #" field. Update the description to include the "# Proposed Changes" heading with the relevant change listed, and add the required "Fixes #" field or state that no issue applies.
✅ Passed checks (4 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly identifies the main change: configuring a Dependabot cooldown.
  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@afritzler afritzler added the chore label Sep 4, 2026
@afritzler afritzler changed the title ci: Set Dependabot's cooldown Set Dependabot's cooldown Sep 4, 2026
@afritzler
afritzler merged commit 56ac464 into ironcore-dev:main Sep 4, 2026
18 checks passed
@github-project-automation github-project-automation Bot moved this to Done in Roadmap Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants