From adc93d0a40c53fcfc6925968a1ba2be8b09e28b2 Mon Sep 17 00:00:00 2001
From: sjvans <30337871+sjvans@users.noreply.github.com>
Date: Mon, 18 May 2026 09:39:09 +0200
Subject: [PATCH 1/3] chore: dependabot cooldown

as suggested in https://github.com/cap-js/telemetry/pull/420
---
 .github/dependabot.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 38eb5c0a..77562e39 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,7 +8,9 @@ updates:
   - package-ecosystem: 'npm' # See documentation for possible values
     directory: '/' # Location of package manifests
     schedule:
-      interval: 'daily'
+      interval: 'weekly'
+    cooldown:
+      default-days: 1
     groups:
       prod-dependencies:
         dependency-type: 'production'
@@ -20,3 +22,10 @@ updates:
         update-types:
           - 'minor'
           - 'patch'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    cooldown:
+      default-days: 1

From 35f9dc1fd448b2127d02738c38dd1d10dfb1927f Mon Sep 17 00:00:00 2001
From: sjvans <30337871+sjvans@users.noreply.github.com>
Date: Mon, 18 May 2026 10:20:58 +0200
Subject: [PATCH 2/3] default-days: 3

Co-authored-by: sjvans <30337871+sjvans@users.noreply.github.com>
---
 .github/dependabot.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 77562e39..3725db37 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,7 +10,7 @@ updates:
     schedule:
       interval: 'weekly'
     cooldown:
-      default-days: 1
+      default-days: 3
     groups:
       prod-dependencies:
         dependency-type: 'production'
@@ -28,4 +28,4 @@ updates:
     schedule:
       interval: 'weekly'
     cooldown:
-      default-days: 1
+      default-days: 3

From 65af0f2a6fd22df195d10315ed8bc8d9e13c99a6 Mon Sep 17 00:00:00 2001
From: sjvans <30337871+sjvans@users.noreply.github.com>
Date: Mon, 18 May 2026 17:21:33 +0200
Subject: [PATCH 3/3] Update dependabot.yml

---
 .github/dependabot.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3725db37..dab5e766 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,12 +1,13 @@
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+# https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
 
 version: 2
 updates:
   - package-ecosystem: 'npm' # See documentation for possible values
     directory: '/' # Location of package manifests
+    versioning-strategy: increase-if-necessary
     schedule:
       interval: 'weekly'
     cooldown: