Skip to content

Add cooldowns to dependabots - #1395

Merged
evrardjp merged 1 commit into
kubereboot:mainfrom
evrardjp:apply-cooldowns
Sep 28, 2026
Merged

evrardjp merged 1 commit into
kubereboot:mainfrom
evrardjp:apply-cooldowns

Conversation

@evrardjp

Copy link
Copy Markdown
Collaborator

To avoid wrong bumps that are quickly fixed, or supply chain attacks, we might want to have a grace period in all our dependabot updates.

This introduces it.

@dharsanb

Copy link
Copy Markdown
Contributor

Should we add it to docker also?

@evrardjp

Copy link
Copy Markdown
Collaborator Author

Yup. I will do it.

To avoid wrong bumps that are quickly fixed, or supply chain
attacks, we might want to have a grace period in all our
dependabot updates.

This introduces it.

Signed-off-by: Jean-Philippe Evrard <open-source@a.spamming.party>
@evrardjp
evrardjp merged commit 3400f6a into kubereboot:main Sep 28, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants