From: Dmitry Misharov <dmitry@openssl.org>
Date: Thu, 23 Oct 2025 10:14:28 +0000 (+0200)
Subject: introduce dependabot cooldown option
X-Git-Tag: 4.0-PRE-CLANG-FORMAT-WEBKIT~240
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c7cfce919701a40323e4e611f263a72ac2003a71;p=thirdparty%2Fopenssl.git

introduce dependabot cooldown option

https://docs.zizmor.sh/audits/#dependabot-cooldown

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28982)
---

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f7270c02c4e..149d2a0acdc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,3 +13,5 @@ updates:
       - "approval: review pending"
     reviewers:
       - "openssl/committers"
+    cooldown:
+      default-days: 7