cpython-devcontainers/.github/dependabot.yml at main · python/cpython-devcontainers · GitHub

Repository navigation

version: 2

updates:

# Maintain dependencies for GitHub Actions

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: monthly

groups:

all-actions:

patterns:

- "*"

cooldown:

# https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

# Cooldowns protect against supply chain attacks by avoiding the

# highest-risk window immediately after new releases.

default-days: 14

open-pull-requests-limit: 10