From: Viktor Szakats <commit@vsz.me>
Date: Fri, 24 Oct 2025 11:49:51 +0000 (+0200)
Subject: GHA/checksrc: extend zizmor to Dependabot, set cooldown periods
X-Git-Tag: curl-8_17_0~111
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7d0261c2288ac52dd8a59ac14ebe823a564ce1ed;p=thirdparty%2Fcurl.git

GHA/checksrc: extend zizmor to Dependabot, set cooldown periods

Closes #19216
---

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bd5661bea4..a6b58f1e62 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,8 @@ updates:
     directory: '/'
     schedule:
       interval: 'monthly'
+    cooldown:
+      default-days: 7
     commit-message:
       prefix: 'GHA:'
 
@@ -17,5 +19,10 @@ updates:
       - '/tests'
     schedule:
       interval: 'monthly'
+    cooldown:
+      default-days: 7
+      semver-major-days: 15
+      semver-minor-days: 7
+      semver-patch-days: 3
     commit-message:
       prefix: 'GHA:'
diff --git a/.github/workflows/checksrc.yml b/.github/workflows/checksrc.yml
index bd930f8ff1..05dcc2ec91 100644
--- a/.github/workflows/checksrc.yml
+++ b/.github/workflows/checksrc.yml
@@ -135,7 +135,7 @@ jobs:
           GH_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
         run: |
           eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
-          zizmor --pedantic .github/workflows/*.yml
+          zizmor --pedantic .github/workflows/*.yml .github/dependabot.yml
 
       - name: 'shellcheck CI'
         run: |