From f0b6769aa19b5ed958dd4b0e178f069645ec3ea7 Mon Sep 17 00:00:00 2001
From: shiny-code-bot <chris@shinycomputers.com>
Date: Tue, 29 Sep 2026 22:35:01 -0400
Subject: [PATCH 1/2] Add Dependabot cooldown to every update entry

Green patch and minor updates are about to merge through the merge train
without an owner click, so every ecosystem waits 30 days before offering a
new major version. Security updates are not delayed by cooldown.

Refs cbusillo/launchplane#2627
---
 .github/dependabot.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 85bbdd9..5da84f4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,8 @@ updates:
   - package-ecosystem: github-actions
     directory: "/"
     open-pull-requests-limit: 2
+    cooldown:
+      semver-major-days: 30
     schedule:
       interval: weekly
     labels:
@@ -22,6 +24,8 @@ updates:
   - package-ecosystem: uv
     directory: "/"
     open-pull-requests-limit: 2
+    cooldown:
+      semver-major-days: 30
     schedule:
       interval: weekly
     labels:
@@ -39,6 +43,8 @@ updates:
   - package-ecosystem: uv
     directory: "/docker/runtime-python"
     open-pull-requests-limit: 2
+    cooldown:
+      semver-major-days: 30
     schedule:
       interval: weekly
     labels:
@@ -56,6 +62,8 @@ updates:
   - package-ecosystem: docker
     directory: "/"
     open-pull-requests-limit: 2
+    cooldown:
+      semver-major-days: 30
     schedule:
       interval: weekly
     labels:
@@ -79,6 +87,8 @@ updates:
   - package-ecosystem: docker
     directory: "/docker"
     open-pull-requests-limit: 2
+    cooldown:
+      semver-major-days: 30
     schedule:
       interval: weekly
     labels:

From ecf25c1f20ddf613a09135fecce1e5a4ba6a66ab Mon Sep 17 00:00:00 2001
From: shiny-code-bot <chris@shinycomputers.com>
Date: Tue, 29 Sep 2026 23:00:43 -0400
Subject: [PATCH 2/2] Use default-days cooldown where semver keys are
 unsupported

Dependabot rejects semver-major-days for github-actions, docker and
docker-compose. Those entries now wait 7 days for every new version; semver
ecosystems keep semver-major-days: 30.

Refs cbusillo/launchplane#2627
---
 .github/dependabot.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5da84f4..2a90c4d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,7 @@ updates:
     directory: "/"
     open-pull-requests-limit: 2
     cooldown:
-      semver-major-days: 30
+      default-days: 7
     schedule:
       interval: weekly
     labels:
@@ -63,7 +63,7 @@ updates:
     directory: "/"
     open-pull-requests-limit: 2
     cooldown:
-      semver-major-days: 30
+      default-days: 7
     schedule:
       interval: weekly
     labels:
@@ -88,7 +88,7 @@ updates:
     directory: "/docker"
     open-pull-requests-limit: 2
     cooldown:
-      semver-major-days: 30
+      default-days: 7
     schedule:
       interval: weekly
     labels: