Skip to content

Conversation

@rvagg
Copy link
Collaborator

@rvagg rvagg commented Jan 6, 2026

Adds 2-day cooldown to match pnpm's minimumReleaseAge (2880 minutes).

Caveats:

  • No automatic sync: dependabot doesn't read pnpm-workspace.yaml
  • No per-package exclusions: minimumReleaseAgeExclude not supported
  • Edge cases may still occur if dependabot pins exact versions

Closes: #534

Adds 2-day cooldown to match pnpm's minimumReleaseAge (2880 minutes).

Caveats:
- No automatic sync: dependabot doesn't read pnpm-workspace.yaml
- No per-package exclusions: minimumReleaseAgeExclude not supported
- Edge cases may still occur if dependabot pins exact versions

Closes: #534
@rvagg rvagg requested review from BigLep and rjan90 January 6, 2026 23:19
@rvagg rvagg requested a review from hugomrdias as a code owner January 6, 2026 23:19
@github-project-automation github-project-automation bot moved this to 📌 Triage in FS Jan 6, 2026
@rvagg rvagg merged commit 48e0811 into master Jan 7, 2026
4 checks passed
@rvagg rvagg deleted the rvagg/dependabot-maturity branch January 7, 2026 01:17
@github-project-automation github-project-automation bot moved this from 📌 Triage to 🎉 Done in FS Jan 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🎉 Done

Development

Successfully merging this pull request may close these issues.

Align dependabot rules with pnpm maturity rule

3 participants