From 42bafdadf9034c9f8c1a132133be98c0148ac906 Mon Sep 17 00:00:00 2001
From: William Woodruff <kevin.stillhammer@gmail.com>
Date: Sun, 16 Aug 2026 15:41:43 -0400
Subject: [PATCH] Add dependency cooldowns (#1021)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This does two things:

- Bumps our Dependabot-side cooldowns to 30d
- Adds an NPM-side 7d cooldown

The idea is to give automated cooldowns a longer period, whereas humans
doing maintenance/manual bumps can opt into a newer package as needed.

---

<sub>Stack created with <a
href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a
href="https://gh.io/stacks-feedback">Give Feedback 💬</a></sub>
---
 .github/dependabot.yml | 4 ++--
 .npmrc                 | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 .npmrc

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3fd581b..cc12f3b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,11 +5,11 @@ updates:
     schedule:
       interval: daily
     cooldown:
-      default-days: 7
+      default-days: 30
 
   - package-ecosystem: npm
     directory: /
     schedule:
       interval: daily
     cooldown:
-      default-days: 7
+      default-days: 30
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..b435032
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+min-release-age = 7