From d1435deedbd419756c10d2874eb0ca0a6c57b405 Mon Sep 17 00:00:00 2001
From: correctmost <134317971+correctmost@users.noreply.github.com>
Date: Sun, 23 Aug 2026 11:41:41 -0400
Subject: [PATCH] Add a cooldown period of 3 days for dev dependency updates

This may help prevent some supply chain attacks.
---
 renovate.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/renovate.json b/renovate.json
index 0dc5ed5a4b..bcb8dc2371 100644
--- a/renovate.json
+++ b/renovate.json
@@ -55,7 +55,8 @@
         "pytest",
         "pylint"
       ],
-      "automerge": true
+      "automerge": true,
+      "minimumReleaseAge": "3 days"
     },
     {
       "description": "Disable PyPI updates for runtime deps tracked via Arch repos",