Skip to content

Set Dependabot's cooldown - #1552

Merged
lukasfrank merged 1 commit into
ironcore-dev:mainfrom
mkalcok:dependabot-cd
Sep 4, 2026
Merged

lukasfrank merged 1 commit into
ironcore-dev:mainfrom
mkalcok:dependabot-cd

Conversation

@mkalcok

@mkalcok mkalcok commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Dependabot won't bump packages to versions that are less than 7 days old.

Summary by CodeRabbit

  • Chores
    • Dependency updates are now held for seven days before being proposed, allowing additional time for update monitoring and validation.

Dependabot won't bump packages to versions that are less than 7 days
old.

Signed-off-by: Martin Kalcok <martin.kalcok@sap.com>
@mkalcok
mkalcok requested a review from a team as a code owner September 4, 2026 09:19
@coderabbitai

coderabbitai Bot commented Sep 4, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 5b2b2f44-6d2b-4dc2-90c2-1e24fb21360b

📥 Commits

Reviewing files that changed from the base of the PR and between 3d08ba9 and bf1b266.

📒 Files selected for processing (1)
  • .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

Dependabot now applies a seven-day default cooldown to gomod, GitHub Actions, pip, and Docker updates.

Changes

Dependabot configuration

Layer / File(s) Summary
Apply update cooldowns
.github/dependabot.yml
Adds default-days: 7 cooldown settings to the gomod, github-actions, pip, and docker update configurations.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to bf1b2

Dependabot will defer updates released within the prior seven days for Go modules, GitHub Actions, pip, and Docker dependencies. The configuration change is consistent across all configured ecosystems and presents no remaining merge-readiness risk.

Suggested reviewers: adracus

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description accurately states the intended behavior, but it does not follow the required template. It omits the "Proposed Changes" section with change details and the "Fixes #" section. Use the repository template. Add a "# Proposed Changes" section with the Dependabot cooldown updates, and include "Fixes #" with an issue number or leave it explicitly marked as not applicable if permitted by repository practice.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely identifies the main change: configuring Dependabot cooldown behavior.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@lukasfrank
lukasfrank merged commit ee24c23 into ironcore-dev:main Sep 4, 2026
11 checks passed
@hardikdr hardikdr added the area/iaas Issues related to IronCore IaaS development. label Sep 5, 2026
@hardikdr hardikdr added this to Roadmap Sep 5, 2026
@github-project-automation github-project-automation Bot moved this to Done in Roadmap Sep 5, 2026
@mkalcok mkalcok added chore and removed area/iaas Issues related to IronCore IaaS development. labels Sep 8, 2026
@afritzler afritzler changed the title ci: Set Dependabot's cooldown Set Dependabot's cooldown Sep 8, 2026
@hardikdr hardikdr added the area/iaas Issues related to IronCore IaaS development. label Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/iaas Issues related to IronCore IaaS development. chore

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants