From 5f569662debaf07615a2599eee82a050149300c4 Mon Sep 17 00:00:00 2001 From: Carlo Goetz Date: Thu, 15 Jan 2026 12:08:38 +0100 Subject: [PATCH 1/2] feat(deps) add 7d cooldown for external deps and 0 for internal --- .github/dependabot.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1230149..29c19c5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,22 @@ updates: directory: "/" schedule: interval: "daily" + cooldown: + default-days: 7 + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "daily" + groups: + internal-deps: + patterns: + - "cloud.stackit*" + external-deps: + patterns: + - "*" + exclude-patterns: + # should be covered by listing internal-deps first (https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--) + # but listing it here to be explicit + - "cloud.stackit*" + cooldown: + default-days: 7 From 7d9bbe64b6c974bf14dbea93ca6a2754a72d76e6 Mon Sep 17 00:00:00 2001 From: Carlo Goetz Date: Thu, 15 Jan 2026 17:57:08 +0100 Subject: [PATCH 2/2] fix(deps) manage internal vs external dependencies via cooldown.exclude --- .github/dependabot.yml | 16 +++------------- 1 file changed, 3 insertions(+), 13 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 29c19c5..704b960 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,16 +10,6 @@ updates: directory: "/" schedule: interval: "daily" - groups: - internal-deps: - patterns: - - "cloud.stackit*" - external-deps: - patterns: - - "*" - exclude-patterns: - # should be covered by listing internal-deps first (https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--) - # but listing it here to be explicit - - "cloud.stackit*" - cooldown: - default-days: 7 + cooldown: + default-days: 7 + exclude: ["cloud.stackit*"]