From a5972280ddc2d6f630fc37906b2778533fd4ac80 Mon Sep 17 00:00:00 2001
From: hatisuka <74543106+hatisuka@users.noreply.github.com>
Date: Mon, 26 Oct 2026 11:55:00 +0900
Subject: [PATCH] =?UTF-8?q?chore:=20Dependabot=20=E3=81=AB=20cooldown=2010?=
 =?UTF-8?q?=E6=97=A5=E3=82=92=E8=A8=AD=E5=AE=9A=E3=81=97=E3=80=81=E6=9B=B4?=
 =?UTF-8?q?=E6=96=B0=E3=83=81=E3=82=A7=E3=83=83=E3=82=AF=E3=82=92=20daily?=
 =?UTF-8?q?=20=E3=81=AB=E3=81=99=E3=82=8B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

サプライチェーン攻撃対策として公開10日未満のバージョンを取り込まない。
全社で daily / open-pull-requests-limit 10 / cooldown 10日に統一する。

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index da059f2..3e0be03 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,10 +4,12 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "monday"
+      interval: "daily"
       time: "10:00"
       timezone: "Asia/Tokyo"
+    cooldown:
+      default-days: 10
+    open-pull-requests-limit: 10
     groups:
       github-actions:
         patterns: