Skip to content

chore(ci): set dependabot cooldown for github-actions - #5023

Merged
jesmrec merged 1 commit into
owncloud:masterfrom
oc-tmueller:chore/dependabot-cooldown-github-actions
Oct 19, 2026
Merged

jesmrec merged 1 commit into
owncloud:masterfrom
oc-tmueller:chore/dependabot-cooldown-github-actions

Conversation

@oc-tmueller

Copy link
Copy Markdown
Contributor

A 7-day cooldown is already imposed before a newly-released GitHub action may be used: new entries in the org's Actions allowlist have to age 7 days before they are accepted. Dependabot's default cooldown is only 3 days, so it opens PRs for new GitHub action releases before they are allowed, and the CI fails.

This sets a 7-day cooldown for github-actions updates in the Dependabot config, the same change as owncloud/core#41905.

dependabot/dependabot-core#15368 announces the Dependabot default cooldown period.

🤖 Generated with Claude Code

A 7-day cooldown is already imposed before a newly-released GitHub
action may be used, but Dependabot's default cooldown is only 3 days,
so it raises github-actions PRs whose CI fails. Same change as
owncloud/core#41905.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
@oc-tmueller
oc-tmueller requested a review from a team as a code owner October 16, 2026 15:32
@CLAassistant

CLAassistant commented Oct 16, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@joragua joragua added the Dependencies Pull requests that update a dependency file label Oct 19, 2026
@jesmrec
jesmrec merged commit ee44f34 into owncloud:master Oct 19, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants