Skip to content

Added cooldown to dependabot - #56

Merged
freakboy3742 merged 3 commits into
beeware:mainfrom
Ashton321:main
Aug 30, 2026
Merged

Added cooldown to dependabot#56
freakboy3742 merged 3 commits into
beeware:mainfrom
Ashton321:main

Conversation

@Ashton321

@Ashton321 Ashton321 commented Aug 30, 2026

Copy link
Copy Markdown
Contributor
  • Added a cooldown of 7 days to dependabot.
  • Allows malicious changes in packages to be caught before dependabot raised a PR to merge the updated malicious packages.
    Fixes 52

PR Checklist:

  • I will abide by the BeeWare Code of Conduct
  • I have read and have followed the CONTRIBUTING.md file
  • This PR was generated or assisted using an AI tool

@freakboy3742 freakboy3742 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR; however, this has changed the update schedule to weekly on Sunday, rather than "first Sunday of the month". We only need to add the cooldown, not change the update schedule.

@freakboy3742 freakboy3742 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Awesome - thanks for the PR!

@freakboy3742
freakboy3742 merged commit 22e47d4 into beeware:main Aug 30, 2026
46 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add cooldown to dependabot actions

2 participants