From 154875cc9f1c3d2cb9a1d75760a00a617ec18486 Mon Sep 17 00:00:00 2001 From: "Schero D." Date: Tue, 10 Nov 2026 22:56:20 +0100 Subject: [PATCH] chore(deps): wait 7 to 14 days before proposing new releases Dependabot version updates now use a cooldown and skip Design System, icons and TypeScript versions the Strapi 5 admin cannot run. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f4cc537..bed5906 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,6 +12,13 @@ updates: timezone: Europe/Berlin open-pull-requests-limit: 5 versioning-strategy: increase-if-necessary + # Wait before proposing a release: brand-new versions carry the highest risk + # of being broken or compromised. Security updates are not delayed. + cooldown: + default-days: 7 + semver-major-days: 14 + semver-minor-days: 7 + semver-patch-days: 7 commit-message: prefix: 'chore(deps)' prefix-development: 'chore(deps-dev)' @@ -41,6 +48,11 @@ updates: # @strapi/sdk-plugin 6.1.1 and typescript-eslint 8 require TypeScript 5.x (< 6.1). - dependency-name: 'typescript' update-types: ['version-update:semver-major'] + # Keep the Design System on the version the Strapi admin ships (2.2.x). + - dependency-name: '@strapi/design-system' + update-types: ['version-update:semver-major', 'version-update:semver-minor'] + - dependency-name: '@strapi/icons' + update-types: ['version-update:semver-major', 'version-update:semver-minor'] - package-ecosystem: github-actions directory: / schedule: @@ -48,6 +60,8 @@ updates: day: monday time: '06:00' timezone: Europe/Berlin + cooldown: + default-days: 7 commit-message: prefix: 'ci' labels: [dependencies]