From b5df9ee94649294745309bd1fcc338dd19d36869 Mon Sep 17 00:00:00 2001 From: saitota Date: Sat, 25 Apr 2026 22:30:20 +0900 Subject: [PATCH 1/3] chore(security): add 7-day cooldown for supply chain protection - pnpm-workspace.yaml: minimumReleaseAge=10080 (7 days) - dependabot.yml: cooldown.default-days 1 -> 7 --- .github/dependabot.yml | 4 ++-- pnpm-workspace.yaml | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 pnpm-workspace.yaml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b168419fa..e6ad7c299 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 1 + default-days: 7 open-pull-requests-limit: 2 groups: all-dependencies: @@ -38,7 +38,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 1 + default-days: 7 open-pull-requests-limit: 1 groups: all-actions: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml new file mode 100644 index 000000000..a312134da --- /dev/null +++ b/pnpm-workspace.yaml @@ -0,0 +1 @@ +minimumReleaseAge: 10080 From 83295aee91333344ef0f1ab023c1dc1ae3774891 Mon Sep 17 00:00:00 2001 From: saitota Date: Sat, 25 Apr 2026 22:33:14 +0900 Subject: [PATCH 2/3] chore: comment minimumReleaseAge unit --- pnpm-workspace.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index a312134da..31bc79c34 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1 +1 @@ -minimumReleaseAge: 10080 +minimumReleaseAge: 10080 # 7 days From f63f7dc55af1c3cc7f953605e1d97ae04c752d93 Mon Sep 17 00:00:00 2001 From: saitota Date: Mon, 27 Apr 2026 08:43:55 +0900 Subject: [PATCH 3/3] chore: lower cooldown to 1 day per review feedback --- .github/dependabot.yml | 4 ++-- pnpm-workspace.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e6ad7c299..b168419fa 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 7 + default-days: 1 open-pull-requests-limit: 2 groups: all-dependencies: @@ -38,7 +38,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 7 + default-days: 1 open-pull-requests-limit: 1 groups: all-actions: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 31bc79c34..06e57c79a 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1 +1 @@ -minimumReleaseAge: 10080 # 7 days +minimumReleaseAge: 1440 # 1 day