chore: cooldown dependabot updates

[LesnyRumcajs]

Summary of changes

Changes introduced in this pull request:

• cooldown in dependabot updates, to alleviate a bit supply chain attacks

Reference issue to close (if applicable)

Closes

Other information and links

Change checklist

• I have performed a self-review of my own code,
• I have made corresponding changes to the documentation. All new code
  adheres to the team's
  documentation standards,
• I have added tests that prove my fix is effective or that my feature works
  (if possible),
• I have made sure the CHANGELOG is up-to-date. All user-facing changes
  should be reflected in this document.

Summary by CodeRabbit

• Chores
  • Updated dependency management automation configuration to introduce a cooldown period for update detection across build and package ecosystems, optimizing the frequency of update notifications.

[Copilot]

Pull request overview

Adds a Dependabot update “cooldown” to reduce how frequently Dependabot opens update PRs.

Changes:

• Add cooldown: default-days: 5 to the cargo Dependabot updates configuration.
• Add cooldown: default-days: 5 to the npm Dependabot updates configuration.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.11%. Comparing base (6edc525) to head (d49f4ef).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #415   +/-   ##
=======================================
  Coverage   41.11%   41.11%           
=======================================
  Files          40       40           
  Lines        2668     2668           
=======================================
  Hits         1097     1097           
  Misses       1571     1571           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6edc525 and d49f4ef.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

This PR adds a 5-day cooldown window (default-days: 5) to Dependabot update configurations for the cargo and npm ecosystems. The cooldown delays PR creation after updates are detected, throttling the frequency of automated dependency update PRs.

Changes

Cohort / File(s)	Summary
Dependabot Configuration .github/dependabot.yml	Added 5-day cooldown period (default-days: 5) to cargo and npm ecosystem update configurations to reduce PR creation frequency.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• build(deps): bump alloy-dyn-abi from 1.4.0 to 1.4.1 #331: Also modifies .github/dependabot.yml cargo update configuration with Dependabot grouping changes.

Suggested labels

dependencies

Suggested reviewers

• hanabi1224
• akaladarshi

Poem

🐰 Five days of rest for dependencies dear,
No hasty PRs shall flood us here,
Cargo and npm now take their time,
Updates arrive at a measured chime! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely summarizes the main change: adding a cooldown mechanism to Dependabot updates. It directly reflects the core modification in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch cooldown-updates

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}