GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — [security] Add a cooldown period to dependabot (GH-141866) · python/cpython@2746c69

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

.github
- dependabot.yml

Expand file treeCollapse file tree

Open diff view settings

Collapse file

`‎.github/dependabot.yml‎`

Copy file name to clipboardExpand all lines: .github/dependabot.yml

+7Lines changed: 7 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -12,10 +12,17 @@ updates:`
`12`	`12`	`update-types:`
`13`	`13`	`- "version-update:semver-minor"`
`14`	`14`	`- "version-update:semver-patch"`
	`15`	`+ cooldown:`
	`16`	`+ # https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns`
	`17`	`+ # Cooldowns protect against supply chain attacks by avoiding the`
	`18`	`+ # highest-risk window immediately after new releases.`
	`19`	`+ default-days: 14`
`15`	`20`	`- package-ecosystem: "pip"`
`16`	`21`	`directory: "/Tools/"`
`17`	`22`	`schedule:`
`18`	`23`	`interval: "monthly"`
`19`	`24`	`labels:`
`20`	`25`	`- "skip issue"`
`21`	`26`	`- "skip news"`
	`27`	`+ cooldown:`
	`28`	`+ default-days: 14`

0 commit comments

Comments

0 (0)

You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.